American Express Enterprise Cloud Security Analyst in Phoenix, Arizona
Enterprise Cloud Security Analyst
American Express is embarking on an exciting Cloud transformation led by a high-energy, delivery-focused team. This group is nimble and creative, with the power to define our cloud security technology functions and tooling. The Enterprise Cloud Security Analyst is an integral member of the Cloud Security Team who, delivers tools, security knowledge and subject matter expertise in order to enable delivery of security requirements for the enterprise, and will ensure the success of the American Express journey towards hybrid cloud.
You will work closely with other Information Security departments, architecture and the Enterprise Cloud team, as well as external cloud providers on requirements, design, integration and delivery of these solutions. This position demands a well-organized, action oriented team player with the ability to prioritize daily work and the ability to work on multiple initiatives simultaneously, to have a command on cutting edge technologies, and an understanding of and drive to deliver end-to-end process and solutions focused on great user experience.
Evaluate various private, public cloud technologies and tools for technical, functional and financial feasibility.
Define and Document security architecture through a risk-based approach in support of the broader Cloud Security Roadmap.
Deliver Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.
Deliver and mature cloud tooling across public and private cloud; collaborate with enterprise architects and SMEs to deliver comprehensive security solutions.
Lead the technical design and deployment of global projects including security solutions for internal and external IaaS and PaaS clouds.
Capture requirements; build functional specifications, timelines, adoption plans and other artifacts to support security implementation.
Build cloud-optimized security patterns and contribute to Enterprise Architecture governance.
Drive proof of concepts that assess the suitability of solutions and demonstrate to our product partners how technology can be leveraged.
Partner with and support the Engineering team to drive and execute results in a timely manner.
2 years experience in securing AWS and experience implementing AWS security services and capabilities such as SCP, IAM, VPC, SecurityHub, and GuardDuty
Information Security experience is preferred
Experience in Cloud Native principles and patterns
Demonstrated knowledge of Kubernetes (EKS, Vanilla or other) and container-based workloads is preferred
Experience using Terraform and authoring declarative reusable modules using the Terraform Configuration Language is preferred
Understanding of Cloud Fundamentals, including containers, software-defined networks, high availability design, multi-cloud, and serverless compute.
Demonstrated experience in Agile environments, application design, software development, and testing.
Knowledge of configuration management, container security, endpoint security and secrets management as they are applied to cloud
Broad understanding of all IS disciplines including, Governance, Cyber Threat, Identity and Access, Infrastructure, Endpoint, Vulnerability, Data Protection, Operations, Application, Incident Response.
Understanding of Information Security technology and platform delivery with experience in planning and execution of security projects.
Knoledge of network architecture, network security, and TCP/IP.
Bachelor’s Degree in computer science, computer engineering, or related field; or equivalent experience
AWS or Cloud Certification is preferred
Information Security Certification required, CISSP or similar is preferred.
“American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, age, or any other status protected by law.”
Primary Location: US-Arizona-Phoenix
Other Locations: United States
Req ID: 21017372