Staff Cybersecurity - Network Security Data Protection

Position Overview

At American Express, our culture is built on a 175-year history of innovation, shared values, and Leadership Behaviors. As part of Team Amex, you'll experience comprehensive support for your well-being, opportunities to learn new skills, and a clear path to grow your career. In this role, you will make an impact by helping define the future of American Express.

This Staff Cybersecurity Leader is accountable for the Network Security Data Protection technical strategy and architecture. You will lead a small team of architects and engineers to transform our network security strategy, improve our cost and speed to market for customers, and bolster our overall security posture. You will author the strategy for data center, public cloud, and edge network security while collaborating closely with network and cloud architecture and engineering teams.

Compensation: Annual Range: $170,000.00 to $255,000.00 annually + bonus + equity (if applicable) + benefits

Key Responsibilities

• Designs and maintains comprehensive network security architecture, ensuring scalability and resilience against evolving threats.
• Oversees the integration of advanced security technologies and methodologies into enterprise-wide systems, driving continuous improvement in security posture.
• Adheres to enterprise governance models for network security architecture, ensuring robust risk management and compliance with global regulatory requirements.
• Authors Policies and Standards that govern network security.
• Assesses highly complex security incidents and breaches, coordinating cross-functional teams and external partners to identify and implement architectural changes.
• Reviews and approves exceptions, assesses risk, and coaches teams on best practices to comply with Network Security Policies and Standards.
• Anticipates, researches, and evaluates the impacts of emerging technologies, threats, trends, and geopolitical developments on the organization's security architecture and recommends strategic improvements.
• Leads cross-functional engineering teams to align implementations with technical specifications and blueprints for efficient project execution.
• Leads development of proof of concepts to evaluate the latest trending software/tools to recommend the right solution for unique business scenarios.
• Architects and designs complex secure network solutions, including advanced firewalls, VPNs, intrusion detection/prevention systems, and other security measures to protect data.
• Ensures the network security strategy and its control implementations protect sensitive data in transit and at rest, maintaining confidentiality and integrity.
• Leads, mentors, and coaches teams, fostering a culture of excellence, continuous professional growth, and knowledge sharing.
• Oversees the development of detailed technical documentation, reports on security assessments, and remediation efforts for senior management and stakeholders.
• Collaborates effectively with product and business teams to align technology initiatives with organizational objectives.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Information Technology, Cybersecurity, or comparable experience; advanced degree preferred.
• Knowledge of cybersecurity technology portfolios, security principles, and frameworks.
• Knowledge of Network Security and Application Security.
• Knowledge of Threat Modeling.
• Knowledge of Identity & Access Management (IAM).
• Knowledge of Data Privacy & Protection (DPP, GDPR).
• Knowledge of Cloud Security Management.
• Familiarity with global regulatory requirements and industry standards for cybersecurity.
• Knowledge of Data Security Management.
• Understanding of Application Development & Security and Data Engineering.
• Experience with scripting languages such as Python, Bash, or PowerShell for automating security tasks.
• Familiarity with network protocols (e.g., TCP/IP, DNS, HTTP) and core security fundamentals.

Preferred Qualifications

• Experience architecting and engineering network and network security in on-premises and public cloud environments.
• Deep understanding of network security principles and technologies including physical, host-based, and virtual firewalls, as well as network micro-segmentation.
• Experience with SIEM tools such as Splunk, ArcSight, QRadar, or Elastic.
• Experience with IDS/IPS (Intrusion Detection/Prevention Systems).
• Familiarity with network security tools such as firewalls (e.g., Palo Alto, Cisco ASA, Illumio, Istio), intrusion detection systems (e.g., Snort, Suricata), WAF, and bot protection solutions.
• Experience in Technical Writing and Documentation Development.
• Proven track record in leading network incident response efforts, including forensic analysis.
• Experience with threat intelligence platforms (e.g., ThreatConnect, Recorded Future) and their integration into network security operations.
• Experience securing cloud environments (e.g., AWS, Azure, Google Cloud) and implementing cloud security best practices.
• Experience responding to and complying with regulatory requirements and standards (e.g., PCI-DSS, ISO 27001, NIST).

Benefits & Perks

• Competitive base salaries
• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible working model with hybrid, onsite or virtual arrangements depending on role and business needs
• 20+ weeks paid parental leave for all parents, regardless of gender (for pregnancy, adoption or surrogacy)
• Free access to global on-site wellness centers (staffed with nurses and doctors, depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities
• For a full list of Team Amex benefits, visit our Colleague Benefits Site.