Sr Software Engineer II - Cybersecurity and Salesforce

The International Card & Risk Services Technology (ICRST) organization delivers the technology strategy, platforms and solutions that underpin International Card Services and Credit & Fraud Risk across global markets. With approximately 900 colleagues across the UK, US, Canada, India and Mexico, ICRST plays a critical role in shaping enterprise-wide technology outcomes and driving compliance, resilience and innovation.

- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline, and/or comparable professional experience; advanced degree preferred.
- Strong knowledge of cybersecurity principles, security engineering practices, and approaches for identifying and mitigating technology risk.
- Working knowledge of the Salesforce platform and the cybersecurity considerations associated with Salesforce environments, configurations, integrations, access controls, and data.
- Knowledge of enterprise application and platform security, including identity and access management, authentication, authorization, data protection, integrations, and secure configuration practices.
- Knowledge of security controls and practices across the technology lifecycle, including design, implementation, testing, deployment, and ongoing maintenance.
- Understanding of cybersecurity risk assessment, threat identification, vulnerability management, and security control implementation.
- Knowledge of cloud and SaaS security concepts and their application within enterprise environments.
- Awareness of emerging technologies, including AI-enabled capabilities, and associated cybersecurity and governance considerations.

Skills and Experience
- At least 4 years of professional experience in cybersecurity.
- At least 2 years of experience in software engineering, cybersecurity engineering, or a closely related technical engineering discipline.
- At least 1 year of experience working with or supporting solutions on the Salesforce platform, including experience applying cybersecurity or engineering principles within a Salesforce environment.
- Demonstrated ability to identify and assess cybersecurity risks and translate security requirements into practical technical recommendations.
- Experience working with technical and non-technical stakeholders to evaluate technology solutions, identify security considerations, and drive appropriate risk mitigation.
- Experience with enterprise security concepts such as identity and access management, authentication and authorization, data protection, application security, platform security, and secure integrations.
- Ability to understand technical architecture, system integrations, data flows, and platform configurations and evaluate them from a cybersecurity perspective.
- Strong analytical and problem-solving skills, with the ability to evaluate complex technical issues and communicate recommendations clearly.
- Experience collaborating across cybersecurity, engineering, technology, product, and business teams.
- Ability to provide technical guidance and influence engineering and security decisions without requiring direct authority.
- Experience working in Agile or other iterative technology delivery environments.
- Strong written and verbal communication skills, including the ability to communicate cybersecurity risks and technical concepts to a range of audiences.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.