American Express
Senior Manager - Application Security Research
Phoenix, AZ +2 · Hybrid · Manager · Full-time · Posted Oct 23, 2026
- Location
- Phoenix, AZ
New York, NY
Atlanta, GA - Education
- Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred.
- Visa sponsorship
- Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.
About the job
Leads hands-on application security research and vulnerability discovery, translating findings into threat intelligence and protections across applications, APIs, AI/ML, and emerging technologies.
What you'll do
- Conduct and lead security research, vulnerability analysis, secure code review, and application security testing; guide remediation based on risk.
- Partner with security operations, threat intelligence, incident response, and engineering teams to investigate threats, develop indicators of compromise, and improve detection.
- Advance AI-enabled cybersecurity operations, including threat detection, incident response, analytics, automation, and responsible use of AI with human validation.
What they ask for
- Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience.
- Knowledge of regulatory compliance and security standards, identity and access management, security architecture, governance, operations, testing, cloud security, and data privacy.
- Experience in cybersecurity operations and application security, technical writing, and SCA/SAST/DAST/MAST/API Security.
- Experience with vulnerability scanning, penetration testing, incident response, cloud security, and applying regulatory requirements and standards.
Nice to have
- Advanced degree.
- At least one security-related certification, such as GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GXPN, GREM, CEH, C|ASE .NET, C|ASE Java, OSCP, OSWA, OSWE, or CSSLP.
Pay
USD 123000 - 215250 annually (base salary)
Tools
Nessus, Qualys, Rapid7, Burp Suite, Wireshark, Metasploit, SQL map, AWS
AI focus
Leads adoption of AI-enabled cybersecurity operations and uses AI-assisted analytics, threat intelligence, and workflow automation; guides responsible AI use, prompt design, governance, and validation of AI outputs.
Model-written summary · the original posting is authoritative