Senior Manager - Application Security Research

Phoenix, Arizona, United StatesWebsite

Apply on American Express's site →

About This Role

Skip to main content.

American English

Deutsch
American English
Español
Français
Italiano
日本語

Our Use of Cookies

Note: Cookies choices made on this website are specific only to the American Express Jobs and Job Application webpages.

Accept All Reject All

Manage Preferences

Are You Still With Us?

It seems you've been gone for a while. For security reasons we will end your session automatically in 03:00 unless you would like to continue working.

End Session Continue Working

action('Decline'), i18nAttr: {'title': 'general.cancel-button', 'aria-label': 'general.cancel-button'}" title="Cancel" aria-label="Cancel">

Work Summary

This summary is generated by AI Assist. Click inside the summary text box to make changes as necessary.

action('Decline')"> Discard action('Accept')"> Add Summary

Source: American Express careers · View original posting

About American Express

American Express Company (Amex) is a multinational financial services corporation based in New York City, founded in 1850. Initially established as a freight forwarding and express delivery business, it evolved into a leader in financial services, banking, and travel. The company has a rich history of innovation, introducing products such as money orders, traveler's cheques, and various charge and credit cards, including the iconic Centurion Card. Amex operates through four main segments: US Consumer Services, Commercial Services, International Card Services, and Global Merchant and Network Services. Its offerings include a wide range of charge and credit cards, travel services like trip planning and ticket booking, and financial products such as money orders. The company serves a diverse clientele, including consumers, businesses, and travelers, with a global presence that spans multiple continents.

Industry

financial services

Employees

76,000

10750 engineers

Revenue

$80B

Website

Visit →

Security at American Express

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Philosophy emphasizes developer velocity, regulatory compliance, and developer experience improvement, with security controls embedded in CI/CD pipelines rather than gatekeeping.
Threat modeling and enterprise risk management frameworks are stated required competencies.
The current strategic priority is AI/LLM-driven application security: 'Lead the strategy and implementation of AI-driven security solutions, leveraging large language models (LLMs), machine learning, and automation to strengthen application security controls and accelerate secure software delivery.' A 'Paved Roads' philosophy is referenced for developer experience.

Security Team

American Express operates a centralized Cybersecurity organization.
Gleb Reznik is Chief Information Security Officer, having replaced Fred Gibbins in March 2026 (SecurityWeek Industry Moves, week of: "Gleb Reznik is replacing Fred Gibbins as the Chief Information Security Officer (CISO) at American Express").
Reznik joined American Express in August 2024 as SVP, Technology Risk and Information Security, after leadership roles at JPMorgan, Synchrony and Capital One.
Fred Gibbins, the former EVP Technology Risk & CISO, stays at American Express only until his retirement in October 2026 (his own LinkedIn announcement) and must NOT be assigned as economic buyer.
Application Security and Vulnerability Management fall under the 'Security Integration & Engineering' function, led at the Director level (Job 26009504, June 2026).
Adjacent security engineering teams include IAM Engineering (Job 26010025) and Privilege Access Management (Job 26009737).
Public-facing cybersecurity leaders identified: (1) Gleb Reznik - Chief Information Security Officer.
(2) Wajeeh Qazi - Director of Cybersecurity (linkedin.com/in/wajeehqazi).
(3) Joe H. - Cyber Security Director (linkedin.com/in/joe-h-810011173).
DO NOT RE-ADD Darby Cacnio (linkedin.com/in/darby-cacnio-85a2415): he is Sr. Director of Cyber Security at American Express Global Business Travel (amexgbt.com / amexglobalbusinesstravel.com, NASDAQ: GBTG), a separate public company, not American Express.
Apollo resolves both his email and his current and prior employment to American Express Global Business Travel.
He was removed from the American Express ABM roster on.
Active director-level job postings (3, as of) confirm multi-team coverage spanning AppSec/Vulnerability Management, IAM Engineering, and Privilege Access Management.

Key Initiatives

(1) AI/LLM-driven AppSec strategy – active hire for Director-level security integration role with explicit mandate to 'Lead the strategy and implementation of AI-driven security solutions, leveraging large language models (LLMs), machine learning, and automation'. (2) Enterprise Security Posture Validation led by Director of Security Integration & Engineering. (3) Multi-source vulnerability intake: penetration testing, scanner outputs, and external HackerOne disclosure program. (4) Vulnerability Management with SLO enforcement and exception workflows feeding executive dashboards. (5) Code-to-cloud security integration with CI/CD security controls. (6) EASM and Sensitive Data Element (SDE) detection programs. (7) Privileged Access Management and IAM Engineering teams adjacent to AppSec. (8) Generative AI Research & Development – Technology R&D.
Paved Roads developer experience methodology.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on American Express's site