Sr Software Engineer II - Cybersecurity and Salesforce

The International Card & Risk Services Technology (ICRST) organization delivers the technology strategy, platforms and solutions that underpin International Card Services and Credit & Fraud Risk across global markets. With approximately 900 colleagues across the UK, US, Canada, India and Mexico, ICRST plays a critical role in shaping enterprise-wide technology outcomes and driving compliance, resilience and innovation.

Responsibilities
• Provides technical leadership and guidance on cybersecurity initiatives for Sales Platforms, with a focus on protecting Salesforce applications and data.
• Partners with engineering, technology, product, and business teams to identify cybersecurity risks and develop solutions that align security requirements with business objectives.
• Applies cybersecurity engineering principles to the design, implementation, and ongoing management of technology solutions and security controls.
• Provides cybersecurity expertise and guidance for solutions leveraging the Salesforce platform, including evaluating security considerations associated with platform configurations, integrations, access, and data protection.
• Assesses technology solutions and proposed changes for cybersecurity risks, identifies potential gaps, and recommends appropriate technical controls or remediation strategies.
• Collaborates with Salesforce platform teams, application owners, cybersecurity teams, and other stakeholders to ensure security requirements are appropriately incorporated into technology solutions.
• Supports the development and implementation of secure architecture, engineering standards, technical controls, and cybersecurity best practices.
• Provides technical guidance and mentorship to engineers and cross-functional colleagues, promoting consistent application of cybersecurity engineering practices.
• Investigates complex technical and security challenges, evaluates potential solutions, and provides recommendations based on risk, technical feasibility, and business requirements.
• Facilitates collaboration across cybersecurity, engineering, product, and business teams to support technology changes and implementations while maintaining alignment with organizational security requirements.
• Contributes to the continuous improvement of cybersecurity engineering practices, processes, standards, and controls.
• Evaluates emerging technologies, including AI-enabled capabilities, from a cybersecurity perspective and supports the responsible adoption of tools and technologies in accordance with applicable security and governance requirements.

Qualifications
• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline, and/or comparable professional experience; advanced degree preferred.
• Strong knowledge of cybersecurity principles, security engineering practices, and approaches for identifying and mitigating technology risk.
• Working knowledge of the Salesforce platform and the cybersecurity considerations associated with Salesforce environments, configurations, integrations, access controls, and data.
• Knowledge of enterprise application and platform security, including identity and access management, authentication, authorization, data protection, integrations, and secure configuration practices.
• Knowledge of security controls and practices across the technology lifecycle, including design, implementation, testing, deployment, and ongoing maintenance.
• Understanding of cybersecurity risk assessment, threat identification, vulnerability management, and security control implementation.
• Knowledge of cloud and SaaS security concepts and their application within enterprise environments.
• Awareness of emerging technologies, including AI-enabled capabilities, and associated cybersecurity and governance considerations.
Skills and Experience

• At least 4 years of professional experience in cybersecurity.
• At least 2 years of experience in software engineering, cybersecurity engineering, or a closely related technical engineering discipline.
• At least 1 year of experience working with or supporting solutions on the Salesforce platform, including experience applying cybersecurity or engineering principles within a Salesforce environment.
• Demonstrated ability to identify and assess cybersecurity risks and translate security requirements into practical technical recommendations.
• Experience working with technical and non-technical stakeholders to evaluate technology solutions, identify security considerations, and drive appropriate risk mitigation.
• Experience with enterprise security concepts such as identity and access management, authentication and authorization, data protection, application security, platform security, and secure integrations.
• Ability to understand technical architecture, system integrations, data flows, and platform configurations and evaluate them from a cybersecurity perspective.
• Strong analytical and problem-solving skills, with the ability to evaluate complex technical issues and communicate recommendations clearly.
• Experience collaborating across cybersecurity, engineering, technology, product, and business teams.
• Ability to provide technical guidance and influence engineering and security decisions without requiring direct authority.
• Experience working in Agile or other iterative technology delivery environments.
• Strong written and verbal communication skills, including the ability to communicate cybersecurity risks and technical concepts to a range of audiences.
Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.