Cybersecurity Engineer III

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Cybersecurity Engineer III will design, develop, and support Agentic AI and automation capabilities that strengthen cybersecurity compliance, audit readiness, ServiceNow CMDB data quality, and enterprise asset governance.

This role will apply Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and AI agent workflows to automate security and compliance responses, improve asset classification, reconcile inventory data, and enhance continuous monitoring of cybersecurity and operational risk.

Responsibilities

Agentic AI Development & Audit Automation

• Design and deploy AI agents to analyze, interpret, and respond to security, compliance, regulatory, and audit requests.
• Use historical audit responses, security documentation, policies, standards, and evidence repositories to train AI agents that generate accurate, consistent, and context-aware responses to future audit requests.
• Create prompt engineering strategies, retrieval methods, and evaluation approaches that improve AI response quality and accuracy.
• Monitor, test, and improve AI agent performance through feedback loops and measurable quality metrics.
• Partners with Security, Risk, Compliance, Audit, Engineering, ITAM, and ServiceNow teams to implement AI-enabled security and asset governance capabilities.
• Design automated controls that reconcile newly discovered assets with ServiceNow CMDB inventory.
• Build reconciliation logic to measure:
  • Inventory completeness
  • Data accuracy
  • Classification accuracy
  • Coverage across discovery sources
  • Asset lifecycle consistency

CMDB, Asset Governance & Risk Automation

• Develop automation to improve the completeness, consistency, and accuracy of ServiceNow Configuration Item (CI) attributes.
• Use discovery, topology, relationships, metadata, and inventory data to identify anomalies, gaps, duplicates, stale records, and misclassified assets.
• Develop recommendation engines, dashboards, and metrics to support CMDB health, data governance, and asset visibility.
• Create AI-powered workflows that continuously assess CMDB data quality and recommend remediation actions.
• Develop AI capabilities that review ServiceNow CMDB records and determine whether Configuration Items are classified correctly.
• Support governance processes through automated evidence generation and continuous monitoring.

Qualifications

Education

• Bachelor’s degree in computer science, Cybersecurity, Information Systems, Data Science, Engineering, Information Technology, or a related technical field, or equivalent practical experience.

Experience

• 2–4 years of experience in information security, cybersecurity engineering, IT Asset Management, ServiceNow, data engineering, automation, or related technical roles.
• Experience developing AI-powered workflows, LLM-backed applications, prompt engineering solutions, or Agentic AI capabilities.
• Experience translating audit, security, and business requirements into scalable technical solutions.

Technical Skills

• Knowledge of AI agent orchestration, RAG, embeddings, vector search, AI evaluation, and enterprise knowledge retrieval.
• Experience with ServiceNow CMDB, CIs, ITAM, ITOM, Discovery, CMDB Health, or related asset management capabilities.
• Proficiency in Python, JavaScript, PowerShell, REST APIs, JSON, or similar tools for automation, integration, and data processing.
• Ability to analyze structured and unstructured data to identify patterns, risks, anomalies, and automation opportunities.

Core Competencies

• Strong analytical, problem-solving, and critical thinking skills.
• Ability to work across technical, audit, security, and governance stakeholders.
• Clear written and verbal communication skills for technical and non-technical audiences.

Preferred Qualifications

• Experience in regulated industries or audit frameworks such as SOC 2, NIST, PCI DSS, or FFIEC.
• Experience integrating ServiceNow with security, endpoint, cloud, infrastructure, or discovery platforms.
• Experience implementing retrieval-augmented generation (RAG) architecture.
• Experience improving CMDB health, data quality, asset governance, or reporting through automation.
• Experience with ServiceNow Performance Analytics, Power BI, or similar analytics tools.
• Relevant ServiceNow, AI, cloud, or cybersecurity certifications.
• Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions.

About us

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

About

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

• Competitive base salaries
• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
• 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. American Express will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable state and local laws, including the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for Employers, and the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. For positions covered by federal and/or state banking regulations, American Express will comply with such regulations as it relates to the consideration of applicants with criminal convictions.
We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.
US Job Seekers - Click to view the “Know Your Rights” poster. If the link does not work, you may access the poster by copying and pasting the following URL in a new browser window: https://www.eeoc.gov/poster.

The below represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.​