American Express

2 days ago

Cyber Security Engineer-CNAPP (AWS, GCP, OCI AND/ OR Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Build and scale a next-generation CNAPP platform to deliver unified, end-to-end visibility across cloud and SaaS environments. Drive risk reduction and secure cloud adoption across AWS, Azure, GCP, and private cloud (e.g., OpenShift) within a DevSecOps model. Automate security controls using everything-as-code and policy-as-code, triage and correlate security findings, integrate CNAPP signals with SIEM/SOAR and observability, and support CI/CD security and onboarding of cloud accounts and Kubernetes clusters.

Location: Phoenix, Atlanta

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Manage CNAPP (Cortex/Prisma/Wiz) platform configurations and triage identity risks and alerts, driving remediation with engineering teams.
•Investigate and correlate security signals across multi-cloud environments (AWS, GCP, Azure, OpenShift) and prioritize actions by business impact and exploitability.
•Partner with policy-as-code and guardrails teams (OPA, Sentinel, native cloud policies) to enforce secure-by-default configurations for CNAPP findings.
•Evaluate CNAPP features and related cloud/container security tools in proof-of-concept efforts, recommending scalable adoption strategies.
•Document solutions and support engineering teams by integrating CNAPP signals with SIEM/SOAR and observability workflows and embedding security controls into CI/CD pipelines.

Pay and Benefits

Salary: USD 89,250 - 150,250 annually

Key Requirements

•3+ years of experience in cloud security engineering across AWS, GCP, and/or Azure, with exposure to hybrid or private cloud environments (e.g., OpenShift).
•Experience leading the design, hands-on implementation, and scaling of CNAPP capabilities (e.g., Palo Cortex) across multi-cloud environments including AWS, Azure, GCP, and OpenShift.
•Strong end-to-end knowledge of CSPM, CWPP, CIEM, container security, and runtime protection posture management, including cloud misconfiguration remediation automation.
•Experience securing Kubernetes/OpenShift environments, including container security, workload isolation, and OPA policy enforcement.
•Define and develop policy-as-code frameworks and infrastructure-as-code tools (e.g., Terraform), and analyze/prioritize security findings using automation playbooks (including XQL).

Experience:3+ years

Skills:Automation-first mindsetAnalytical thinkingProblem-solvingExecution disciplineCollaboration

Tech Stack:AWSGCPAzureOCIOpenShiftKubernetesCNAPPPalo CortexPrismaWizCSPMCWPPCIEMOPASentinelCloud NativeHashi SentinelTerraformXQLSIEM

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

American Express

Provides global payment, credit, and travel-related financial services for consumers and businesses. Best known for its charge and credit cards, merchant payment network, and premium customer rewards and servicing.

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York City, United States

Founded: 1850

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

American Express

2 days ago

Cyber Security Engineer-CNAPP (AWS, GCP, OCI AND/ OR Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 20 hours agoStatus: Live

Job Summary

Location: Phoenix, Atlanta

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Manage CNAPP (Cortex/Prisma/Wiz) platform configurations and triage identity risks and alerts, driving remediation with engineering teams.
•Investigate and correlate security signals across multi-cloud environments (AWS, GCP, Azure, OpenShift) and prioritize actions by business impact and exploitability.
•Partner with policy-as-code and guardrails teams (OPA, Sentinel, native cloud policies) to enforce secure-by-default configurations for CNAPP findings.
•Evaluate CNAPP features and related cloud/container security tools in proof-of-concept efforts, recommending scalable adoption strategies.
•Document solutions and support engineering teams by integrating CNAPP signals with SIEM/SOAR and observability workflows and embedding security controls into CI/CD pipelines.

Pay and Benefits

Salary: USD 89,250 - 150,250 annually

Key Requirements

•3+ years of experience in cloud security engineering across AWS, GCP, and/or Azure, with exposure to hybrid or private cloud environments (e.g., OpenShift).
•Experience leading the design, hands-on implementation, and scaling of CNAPP capabilities (e.g., Palo Cortex) across multi-cloud environments including AWS, Azure, GCP, and OpenShift.
•Strong end-to-end knowledge of CSPM, CWPP, CIEM, container security, and runtime protection posture management, including cloud misconfiguration remediation automation.
•Experience securing Kubernetes/OpenShift environments, including container security, workload isolation, and OPA policy enforcement.
•Define and develop policy-as-code frameworks and infrastructure-as-code tools (e.g., Terraform), and analyze/prioritize security findings using automation playbooks (including XQL).

Experience:3+ years

Skills:Automation-first mindsetAnalytical thinkingProblem-solvingExecution disciplineCollaboration

Tech Stack:AWSGCPAzureOCIOpenShiftKubernetesCNAPPPalo CortexPrismaWizCSPMCWPPCIEMOPASentinelCloud NativeHashi SentinelTerraformXQLSIEM

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

American Express

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: New York City, United States

Founded: 1850

Website LinkedIn