Cyber Security Engineer

American Express Global Business Travel is a travel services company focused on helping colleagues and customers achieve success through travel. The Cyber Security Engineer designs, implements, and maintains security controls, deploys security technologies, resolves technical issues, and collaborates with architecture and engineering teams to reduce cyber risk and protect systems, data, and infrastructure.

Responsibilities:

• Design, implement, and manage security controls across enterprise systems and networks
• Deploy and maintain security technologies such as WAF, IDS/IPS, SIEM, DLP, Proxy, and endpoint protection tools
• Configure and troubleshoot security infrastructure to ensure high availability and effectiveness
• Estimate technical effort, work breakdown structure, risks, and dependencies
• Analyze and resolve technical problems
• Establish and promote design guidelines and standards
• Experiment with new and emerging technologies
• Working with CyberSecurity Architects team for the planning, proposal and implementation of security controls and platforms
• Working knowledge in the field of CyberSecurity, including but not limited to Cloud deployments, application integration, and APIs
• Project level experience working in a team environment with multiple parallel workflows, team members, Project Managers, and defined deliverables
• Identify and define system security requirements including requirements for achieving audit requirements
• Preparing and documenting standard operating procedures and protocols for the Projects and workflows that the Engineer is participating in for the team
• Configure and troubleshoot security infrastructure devices as necessary for a smooth and highly available set of controls
• In a team environment, develop technical solutions and deploy security tools to help mitigate security vulnerabilities and automate repeatable tasks
• Troubleshooting and diagnostic skills for the purpose of providing long term actionable solutions and remediation of issues
• Responding to and participating in incidents as a representative of the CyberSecurity Engineering team
• Ensuring that the organization's data and infrastructure are protected by enabling and maintaining security controls. This includes Gap Analysis as necessary
• Participating in the change management process
• Daily administrative tasks, reporting and communication with the relevant stakeholders, managers and directors
• Delivering comprehensive reports including assessment-based findings, outcomes and solutions for increased system security enhancements
• Working as part of a team with similarly tasked Engineers and Analysts in a diverse, engaging, supportive and respectful manner

Requirements:

• ~5+ years of experience in cyber security engineering or related roles
• Bachelor's degree in Computer Science, Cyber Security, or related field (or equivalent experience) such as CISSP, CEH, GSEC, CSSP
• Curiosity and passion for problem solving
• Fluent in English
• Inclusive, collaborative, and able to work seamlessly with a multicultural and international team
• Building real time analytics and data pipeline from different sources
• Developing micro-service using rest framework
• Exposing and consuming data using APIs
• Network security and networking technologies
• Operating system and database security
• Security monitoring and logging tools