> Markdown version of [/jobs/ext/4248362-senior-manager-application-security-research](https://www.wearedevelopers.com/jobs/ext/4248362-senior-manager-application-security-research). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Manager - Application Security Research

- **Company:** American Express Company
- **Location:** Phoenix, AZ, United States
- **Experience:** Expert
- **Salary:** $123,000.0 - $215,250.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Burp Suite, Cloud Computing Security, Cyber Security, Information Systems, Disaster Recovery, Identity and Access Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Network Security, Network Segmentation, PCI Data Security Standards, Reverse Engineering, Secure Coding, Software Engineering, SQL Databases, Wireshark, Google Cloud, Cloud Platform System, Software Security, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Information Technology, Metasploit, Cybercrime, Nessus, Qualys, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4cb8c1c498138224

## About the Role

This is a hands-on technical leadership position requiring strong research capabilities, engineering expertise, and the ability to investigate complex security challenges independently while guiding others.

 * Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
 * Knowledge of regulatory compliance and security standards
 * Knowledge of Identity & Access Management
 * Knowledge of Security Architecture Management
 * Knowledge of Security Governance and Operations
 * Knowledge of Security Testing & Remediation
 * Knowledge of Cloud Security Management
 * Knowledge of Data Privacy & Protection (DPP, GDPR)
 * Knowledge of AI-enabled cybersecurity operations platforms, automated threat detection techniques, and AI-assisted security analytics capabilities
 * Understanding of AI security risks, responsible AI governance principles, and the operational implications of AI-enabled technologies within cybersecurity environments
 * Experience in cybersecurity operations and application security
 * Experience in Technical Writing and Documentation Development
 * Experience with SCA/SAST/DAST/MAST/API Security
 * Experience in network security, understanding of network security principles, including firewalls, VPNs, and network segmentation
 * Experience in vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7) and remediation processes
 * Experience with penetration testing using industry-standard tools (e.g., Burp Suite, Wireshark, Metasploit, SQL map) for ongoing monitoring and compliance
 * Experience in working on incident response efforts, including forensic analysis, malware analysis, and threat hunting
 * Experience in securing cloud environments (e.g., AWS, Azure, Google Cloud) and implementing cloud security best practices
 * Experience in regulatory requirements and standards (e.g., PCI-DSS, ISO 27001, NIST) and their application in cybersecurity operations
 * Experience in Business Continuity Planning and Disaster Recovery
 * At least one security related certification preferred like: GCPN, GWEB, GMOB, GOAA, GPEN, GWAT, GPEN, GXPN, GREM, CEH, C|ASE .NET, C|ASE Java, OSCP, OSWA, OSWE, CSSLP, other

## Description

Reporting to the Director of Application Security, this role will lead and actively contribute to advanced security research focused on identifying, analyzing, and mitigating vulnerabilities across applications, software components, APIs, AI/ML, and emerging technologies.

The ideal candidate combines deep hands-on expertise in reverse engineering, vulnerability research, secure code review, and software engineering with the ability to translate technical discoveries into actionable security intelligence.

This position works closely with the American Express Fusion Center, Security Operations Center (SOC), Cyber Threat Intelligence, Incident Response, and engineering teams to identify emerging threats, develop indicators of compromise (IoCs), improve detection capabilities, and proactively protect American Express against sophisticated cyber threats.