Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

American Express is seeking Senior Engineer-Agentic AI Automation with proven strong technical competence and leadership capability to contribute towards the success of enterprise-wide Security initiatives. Senior Engineer- Agentic AI Automation serves as a subject matter expert in Generative AI, automates integrations and plays an integral role in managing, monitoring & reporting on Generative AI, LLMs, agent orchestration, RAG, cloud-native architectures, and enterprise system integration. The candidate should be capable of designing, developing, deploying, and operating production-scale AI agent platforms while providing technical leadership, ensuring security and governance compliance, and driving business value through intelligent automation solutions.

This role will focus on building internal security tools, automating secure design reviews, and integrating security guidance directly into pull requests.

The role will empower both the security and development teams by reducing friction in the security review process and ensuring best practices are embedded seamlessly into the Software Development Lifecycle (SDLC)

• Agent Design & Orchestration-Designing autonomous AI agents and multi-agent workflows
• Agentic Task planning, reasoning, memory, and tool usage
• Collaborate effectively across security and engineering teams.
• Conduct research on emerging threats, vulnerabilities, and technologies to stay updated on the evolving security landscape.
• Develop and maintain security automation tooling to enhance visibility, enforce security best practices, and streamline processes.
• Automate secure design reviews and integrate security checks into pull request workflows and CI/CD pipelines.
• Collaborate with development and security teams to ensure seamless adoption of security automation.
• Continuously refine automation strategies to optimize security effectiveness and reduce manual overhead.
• Support on-going vulnerability management efforts to ensure proper attack surface management.
• Proficiency in Python, with experience building automation tools for security or engineering teams
• A strong foundation in software engineering principles, including debugging, testing, and system design. An eagerness to learn about AI/ML, with opportunities to explore the intersection of AI and security.
• Work closely with our Engineering and Data science teams to securely design and implement new features and products.
• Operate as an integral member of Engineering team and advocate for security best practices across the organization.
• Strong understanding, experience with OWASP Top10 and industry best practices within Generative AI security.

Security and Technical Experience

• Experience building automation tooling for security or developer efficiency.
• Proficiency in at least one scripting language (Python, JavaScript, or Bash) and familiarity with a compiled language (Go, Rust, or Java).
• Experience with frameworks such as LangGraph, OpenAI Agents SDK, CrewAI, or AutoGen.
• Experience building automation tooling for security or developer efficiency
• Proficiency in at least one scripting language (Python, JavaScript, or Bash) and familiarity with a compiled language (Go, Rust, or Java)
• Experience with GitHub automation and API integrations.
• Strong Experience of CI/CD pipelines and how to integrate security into development workflows.
• Experience performing POC’s regarding security tooling, zero-day vulnerabilities and emerging risks.
• Familiarity with database architectures: Oracle, SQL and NoSQL Databases.

Desired Skills

• Information security professional certifications encouraged, such as SANS GIAC, CISSP, Generative AI certifications.
• Experience mentoring application security and secure development practices to the team.
• Master's Degree – Cyber Security, Data Science, Computer Science, or Software Engineering
• Machine Learning Operation Professional Certifications.
• Strong knowledge of Adversarial Robustness techniques and tools for machine learning.
• Strong knowledge of AI Risk Management frameworks and Trustworthy AI practices.

• Bachelor’s degree in Cybersecurity, Data science, Computer Science or Software Engineering.
• 8 + years’ experience with Automation and Development in CI/CD.
• 8 + years of software engineering experience.
• 5+ Years of Cybersecurity.
• 2+ years of Generative AI experience.

Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for some positions.