Job Description

You Lead the Way. We\xe2\x80\x99ve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you\xe2\x80\x99ll learn and grow as we help you create a career journey that\xe2\x80\x99s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally. At American Express, you\xe2\x80\x99ll be recognized for your contributions, leadership, and impact\xe2\x80\x94every colleague has the opportunity to share in the company\xe2\x80\x99s success. Together, we\xe2\x80\x99ll win as a team, striving to uphold our company values and powerful backing promise to provide the world\xe2\x80\x99s best customer experience every day. And we\xe2\x80\x99ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. Join Team Amex and let\'s lead the way together.
As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers\xe2\x80\x99 digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology of #TeamAmex.

Description:

American Express is on an exciting Cloud transformation led by a high-energy, delivery-focused team delivering security as code and integration to enable on-premise equivalent security models for cloud workloads. The Information Security Analyst will assist in implementing information security processes, controls, and compliance. The Information Security Analyst will help identify outstanding vulnerabilities and misconfigurations, provide guidance to teams for remediation, improve capabilities, maintain functions, and expand coverage and vulnerability reporting across the cloud program. The Information Security Analyst will also provide technical knowledge and contribute to teams of information security experts and craft processes that effectively protect the enterprise and the related management of regulatory/compliance and other guidance. Responsibilities:

• Makes difficult, timely decisions regarding simple and complex business or security issues.
• Assists leaders with the development of plans and strategies for information security tools, processes, and programs.
• Supports processes and methods for auditing and addressing non-compliance to information security standards and methodologies; facilitates migration of non-compliant environments to compliant environments
• Supports the development of metrics and information that meet the requirements of collaborator which can be actioned to drive significant improvements in the environment and performance
• Supports partners to achieve targeted levels of information security, project oversight, and controls
• Supports the investment decision process by developing cases and cost benefit analyses for new information security solutions using standard methodologies
• Documents current and desired future state capabilities, incorporating industry leading technologies and regulatory requirements that enhance AXP\'s ability to handle information security risk and protect data
• Operate operational processes which support and maintain cloud security capabilities
• Monitor Cloud Service Provider updates for consideration of security impacts of updates
• Partner with Cloud Security Engineering team, deliver security code elements across private and public multi-cloud
• Collaborate with architects and SMEs to support and maintain complete security architecture solutions.
• Support gating patterns for Global Dev teams (Twistlock, OPA, TSSC, Sentinel, Cloud Native)

Qualifications:

• 2+ years experience working in public or private Cloud(s) (AWS, Azure, GCP, or Private)
• Knowledge of Security principles applied to cloud is preferred
• Experience in Vulnerability and Configuration management, including operational reporting and metric development
• Understanding of classical or cloud-native design patterns is required.
• Experience with Docker, Open Containers Initiative, or similar is required.
• Understanding of Cloud Fundamentals, including securing public cloud
• Knowledge of security configuration management, container security, endpoint security and secrets management as they are applied to cloud applications is preferred.

Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefits The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we\'ll consider your location, experience, and other job-related factors. We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:

• Competitive base salaries
• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex
• 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site. At American Express, you\xe2\x80\x99ll be recognized for your contributions, leadership, and impact\xe2\x80\x94every colleague has the opportunity to share in the company\xe2\x80\x99s success. Together, we\xe2\x80\x99ll win as a team, striving to uphold our company values and powerful backing promise to provide the world\xe2\x80\x99s best customer experience every day. And we\xe2\x80\x99ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. We back our colleagues with the support they need to thrive, professionally and personally. That\'s why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually. Considerations for sponsorship: Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions. US Job Seekers/Employees - Click here to view the \xe2\x80\x9cKnow Your Rights\xe2\x80\x9d poster and supplement and the Pay Transparency Policy Statement. If the links do not work, please copy and paste the following URLs in a new browser window: https://www.dol.gov/agencies/ofccp/posters to access the three posters.