Senior Manager - Application Security Research
American Express1 day ago
Phoenix, AZ, USAStaff+
Base Salary
$123k - $215k/yr
Responsibilities
- Lead and contribute to application security research, vulnerability discovery, reverse engineering, threat analysis, and mitigation across applications, software components, APIs, AI/ML, and emerging technologies.
- Monitor application security systems and manage application security platforms, processes, policies, procedures, and standards.
- Oversee vulnerability management, application security testing, remediation prioritization, security assessments, audits, and risk mitigation.
- Plan and support event response, investigations, remediation, threat hunting, forensic analysis, malware analysis, and stakeholder communications.
- Collaborate with the Fusion Center, Security Operations Center, Cyber Threat Intelligence, Incident Response, product, business, and engineering teams.
- Develop reports, dashboards, documentation, training programs, playbooks, and operational improvements for application security.
- Lead adoption of AI-enabled cybersecurity operations, threat intelligence, workflow automation, and prompt design while validating AI-generated outputs and maintaining governance.
- Provide technical leadership, strategic recommendations, mentoring, coaching, and potentially resource, hiring, timeline, and budget oversight.
Requirements
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or comparable experience; an advanced degree is preferred.
- Knowledge of regulatory compliance, security standards, Identity & Access Management, Security Architecture Management, Security Governance and Operations, Security Testing and Remediation, Cloud Security Management, and Data Privacy and Protection.
- Experience in cybersecurity operations, application security, technical writing, and documentation development.
- Experience with SCA, SAST, DAST, MAST, and API Security.
- Experience with network security principles, including firewalls, VPNs, and network segmentation.
- Experience with vulnerability scanning tools such as Nessus, Qualys, and Rapid7, plus remediation processes.
- Experience with penetration testing tools such as Burp Suite, Wireshark, Metasploit, and SQLmap.
- Experience with incident response, forensic analysis, malware analysis, and threat hunting.
- Experience securing cloud environments such as AWS, Azure, and Google Cloud.
- Experience applying PCI-DSS, ISO 27001, NIST, and other regulatory requirements and standards.
- Experience with Business Continuity Planning and Disaster Recovery.
- Knowledge of AI-enabled cybersecurity operations platforms, automated threat detection, AI-assisted security analytics, AI security risks, and responsible AI governance.
- A security certification such as GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GXPN, GREM, CEH, C|ASE .NET, C|ASE Java, OSCP, OSWA, OSWE, or CSSLP is preferred.
About American Express
American Express builds a global payments network and issues consumer, small-business, and corporate cards, plus merchant acquiring and travel services. Revenue comes from card fees, interest and lending, discount/merchant fees, and network services. Founded in 1850 and headquartered in New York City, it operates the Amex acceptance network worldwide and offers co-branded cards and membership rewards across millions of cardmembers and merchants; ticker NYSE: AXP.