CyberSecurity Engineer

Overview

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

Amex GBT is seeking a Cyber Security Engineer with an analytical mind and a detailed understanding of cyber security methodologies. Cyber Security Engineers are expected to provide meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure and deliver on tight deadlines.

To ensure success, a Cyber Security Engineer must display an excellent understanding of technology infrastructures which include but are not limited to Encryption, Certificates, Security governance and oversight, Security Controls, Security tooling, and Security policies and procedures. Top candidates must be comfortable working with a variety of technologies, large scale deployments, security problems and troubleshooting and providing Cyber Security engineering deliverables in a secure/compliant manner.

• Working with Cyber Security Architects team for the planning, proposal and implementation of security controls and platforms.

• Working knowledge in the field of Cyber Security, including but not limited to Cloud deployments, application integration, and APIs.

• Project level experience working in a team environment with multiple parallel workflows, team members, Project Managers, and defined deliverables.

• Identify and define system security requirements including requirements for achieving audit requirements.

• Preparing and documenting standard operating procedures and protocols for the Projects and workflows that the Engineer is participating in for the team.

• Configure and troubleshoot security infrastructure devices as necessary for a smooth and highly available set of controls.

• In a team environment, develop technical solutions and deploy security tools to help mitigate security vulnerabilities and automate repeatable tasks

• Troubleshooting and diagnostic skills for the purpose of providing long term actionable solutions and remediation of issues.

• Responding to and participating in incidents as a representative of the Cyber Security Engineering team.

• Ensuring that the organization's data and infrastructure are protected by enabling and maintaining security controls. This includes Gap Analysis as necessary.

• Participating in the change management process

• Daily administrative tasks, reporting and communication with the relevant stakeholders, managers and directors.

• Delivering comprehensive reports including assessment-based findings, outcomes and solutions for increased system security enhancements

• Working as part of a team with similarly tasked Engineers and Analysts in a diverse, engaging, supportive and respectful manner

• Knowledge of risk assessment tools, technologies and methods

• Experience designing secure networks, systems and application architectures

• Use and deployment of encryption for data protection at rest and in transit for contractual, regulatory and audit requirements

• Direct experience with implementation of security tools such as WAF, DAM, IPS/IDS, Anti-DDoS, Bot Detection, SIEM, Data Leakage Prevention, Proxy, Automation & Orchestration, etc.

• Experience working in a team environment for planning, researching and developing security policies, standards and procedures

• Ability to communicate security issues to peers and management

• Detailed technical knowledge of database and operating system security

• Experience with network security and networking technologies and with system, security, and network monitoring tools

• Thorough understanding of the latest security principles, techniques, and protocols

• Maintaining current knowledge of technology capabilities and trends

• Problem solving skills and ability to work under pressure

• Understanding of the OSI (Open Systems Interconnection) model and well-known ports and services

• BS degree in Computer Science, Cyber Security or related field or equivalent work experience

• Industry certifications in cyber security such as but not limited to, CISSP, GSEC,…