AI Security Engineer III - Agentic AI & Security Automation

We are seeking an innovative and hands\-on AI Security Engineer to design, develop, and implement AI\-powered solutions that transform traditional cybersecurity processes through intelligent automation, agentic AI, and secure software engineering.

This role will primarily focus on developing autonomous and semi\-autonomous AI agents to identify, analyze, correlate, and prioritize security vulnerabilities; generate remediation recommendations; automate secure code and dependency fixes; validate proposed changes; create GitHub pull requests; and proactively engage application owners through intelligent notification and escalation workflows.

The engineer will build AI\-driven capabilities to streamline vulnerability remediation across application code, APIs, software dependencies, container images, and cloud environments. A key objective is to reduce manual remediation effort, accelerate vulnerability closure, improve reporting accuracy, and enable application teams to address security risks more efficiently.

The engineer will also contribute to AI\-driven innovations across Cryptographic Metadata, Automated Assurance, and Cryptographic Lifecycle Visibility, improving security posture, inventory accuracy, compliance, and proactive risk management.

The ideal candidate is a strong Python developer with practical experience in AI/LLM technologies, AI agent development, REST API integrations, GitHub automation, CI/CD pipelines, and secure software development. The candidate should be comfortable building production\-quality automation solutions and applying emerging AI capabilities to solve real\-world cybersecurity challenges.

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Artificial Intelligence, or a related field, or equivalent practical experience.
• 2–4 years of hands\-on experience in software development, automation engineering, DevSecOps, security engineering, or related technical roles.
• Strong programming skills in Python, including scripting, REST API integrations, JSON processing, data manipulation, error handling, automated testing, and development of reusable automation components.
• Practical experience developing applications or automation solutions using Generative AI and Large Language Models (LLMs), including prompt engineering, tool/function calling, structured outputs, and AI agent workflows.
• Familiarity with AI agent frameworks and orchestration technologies such as LangChain, LangGraph or equivalent frameworks.
• Experience working with GitHub, Git workflows, pull requests, repository automation, and CI/CD pipelines.
• Understanding of software security fundamentals, vulnerability identification, secure coding practices, dependency management, and vulnerability remediation workflows.
• Working knowledge of common application security vulnerabilities and remediation approaches involving APIs, open\-source dependencies, container images, and application code.
• Familiarity with security scanning tools, vulnerability management platforms, or CTEM concepts, including vulnerability prioritization, risk scoring, remediation tracking, and validation.
• Experience with REST API integrations, scheduled automation, event\-driven workflows, and integration of multiple enterprise systems.
• Understanding of secure software development practices, including code reviews, unit testing, automated security testing, and deployment validation.
• Awareness of AI application security considerations, including prompt injection, sensitive\-data handling, least\-privilege access, human\-in\-the\-loop approval, and validation of AI\-generated outputs.
• Basic knowledge of cryptographic security concepts, including encryption algorithms, TLS, digital certificates, cryptographic libraries, and key management.
• Strong analytical, troubleshooting, and problem\-solving skills, with the ability to translate cybersecurity requirements into practical engineering and automation solutions.
• Ability to collaborate effectively with cross\-functional engineering, application development, DevSecOps, and cybersecurity teams.

At American Express, our culture is built on a 175\-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world\-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well\-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

We back you with benefits that support your holistic well\-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• Support for financial\-well\-being and retirement
• Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• Generous paid parental leave policies (depending on your location)
• Free access to global on\-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.