Sr Software Engineer II - Cybersecurity and Salesforce

Responsibilities

Provide technical leadership on cybersecurity initiatives for Salesforce-based sales platforms, assessing risks and recommending controls across configurations, integrations, access, and data protection. Collaborate with engineering, cybersecurity, product, and business teams to embed secure architecture and practices, mentor colleagues, and evaluate emerging technologies, including AI-enabled capabilities.

Requirements

Requires at least four years of cybersecurity experience, including at least two years in software or cybersecurity engineering and one year supporting Salesforce solutions. Candidates should have strong cybersecurity and enterprise application security knowledge, be able to assess technical risks and communicate practical recommendations, and have a relevant bachelor's degree or comparable professional experience; an advanced degree is preferred.

Skills

• Cybersecurity
• Salesforce Security
• Security Engineering
• Risk Assessment
• Identity And Access Management
• Authentication And Authorization
• Data Protection
• Application Security
• Platform Security
• Cloud And SaaS Security
• Vulnerability Management
• Secure Integrations
• Technical Architecture
• Agile
• Stakeholder Collaboration
• Technical Communication

About this role

The International Card & Risk Services Technology (ICRST) organization delivers
the technology strategy, platforms and solutions that underpin International
Card Services and Credit & Fraud Risk across global markets. With approximately
900 colleagues across the UK, US, Canada, India and Mexico, ICRST plays a
critical role in shaping enterprise-wide technology outcomes and driving
compliance, resilience and innovation.

RESPONSIBILITIES

* Provides technical leadership and guidance on cybersecurity initiatives for
Sales Platforms, with a focus on protecting Salesforce applications and data.
* Partners with engineering, technology, product, and business teams to
identify cybersecurity risks and develop solutions that align security
requirements with business objectives.
* Applies cybersecurity engineering principles to the design, implementation,
and ongoing management of technology solutions and security controls.
* Provides cybersecurity expertise and guidance for solutions leveraging the
Salesforce platform, including evaluating security considerations associated
with platform configurations, integrations, access, and data protection.
* Assesses technology solutions and proposed changes for cybersecurity risks,
identifies potential gaps, and recommends appropriate technical controls or
remediation strategies.
* Collaborates with Salesforce platform teams, application owners,
cybersecurity teams, and other stakeholders to ensure security requirements
are appropriately incorporated into technology solutions.
* Supports the development and implementation of secure architecture,
engineering standards, technical controls, and cybersecurity best practices.
* Provides technical guidance and mentorship to engineers and cross-functional
colleagues, promoting consistent application of cybersecurity engineering
practices.
* Investigates complex technical and security challenges, evaluates potential
solutions, and provides recommendations based on risk, technical feasibility,
and business requirements.
* Facilitates collaboration across cybersecurity, engineering, product, and
business teams to support technology changes and implementations while
maintaining alignment with organizational security requirements.
* Contributes to the continuous improvement of cybersecurity engineering
practices, processes, standards, and controls.
* Evaluates emerging technologies, including AI-enabled capabilities, from a
cybersecurity perspective and supports the responsible adoption of tools and
technologies in accordance with applicable security and governance
requirements.

QUALIFICATIONS

* Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity,
Information Systems, or a related technical discipline, and/or comparable
professional experience; advanced degree preferred.
* Strong knowledge of cybersecurity principles, security engineering practices,
and approaches for identifying and mitigating technology risk.
* Working knowledge of the Salesforce platform and the cybersecurity
considerations associated with Salesforce environments, configurations,
integrations, access controls, and data.
* Knowledge of enterprise application and platform security, including identity
and access management, authentication, authorization, data protection,
integrations, and secure configuration practices.
* Knowledge of security controls and practices across the technology lifecycle,
including design, implementation, testing, deployment, and ongoing
maintenance.
* Understanding of cybersecurity risk assessment, threat identification,
vulnerability management, and security control implementation.
* Knowledge of cloud and SaaS security concepts and their application within
enterprise environments.

* Awareness of emerging technologies, including AI-enabled capabilities, and
associated cybersecurity and governance considerations.

Skills and Experience

* At least 4 years of professional experience in cybersecurity. 
* At least 2 years of experience in software engineering, cybersecurity
engineering, or a closely related technical engineering discipline.
* At least 1 year of experience working with or supporting solutions on the
Salesforce platform, including experience applying cybersecurity or
engineering principles within a Salesforce environment.
* Demonstrated ability to identify and assess cybersecurity risks and translate
security requirements into practical technical recommendations.
* Experience working with technical and non-technical stakeholders to evaluate
technology solutions, identify security considerations, and drive appropriate
risk mitigation.
* Experience with enterprise security concepts such as identity and access
management, authentication and authorization, data protection, application
security, platform security, and secure integrations.
* Ability to understand technical architecture, system integrations, data
flows, and platform configurations and evaluate them from a cybersecurity
perspective.
* Strong analytical and problem-solving skills, with the ability to evaluate
complex technical issues and communicate recommendations clearly.
* Experience collaborating across cybersecurity, engineering, technology,
product, and business teams.
* Ability to provide technical guidance and influence engineering and security
decisions without requiring direct authority.
* Experience working in Agile or other iterative technology delivery
environments.

* Strong written and verbal communication skills, including the ability to
communicate cybersecurity risks and technical concepts to a range of
audiences.

Employment eligibility to work with American Express in the United States is
required as the company will not pursue visa sponsorship for these positions.

At American Express, our culture is built on a 175...

About American Express

Financial Services · 10,001+ employees · headquartered in New York, NY