> Markdown version of [/jobs/ext/4427453-cyber-security-engineer-application-security-tooling-sca-sast-dast-mast-api-security](https://www.wearedevelopers.com/jobs/ext/4427453-cyber-security-engineer-application-security-tooling-sca-sast-dast-mast-api-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer-Application Security Tooling (SCA/SAST/ DAST/ MAST/ API Security)

- **Company:** American Express Company
- **Location:** Phoenix, AZ, United States
- **Salary:** $103,750.0 - $174,750.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, Application Lifecycle Management, Automation of Tests, Unit Testing, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Continuous Integration, Information Engineering, Data Security, Relational Databases, Django Web Framework, Python (Programming Language), PostgreSQL, Node.Js, NoSQL, Object-Oriented Software Development, Oracle (Applications), Windows PowerShell, Scrum Methodology, Regression Testing, Software Engineering, Scripting, ReactJS, Software Security, Event Driven Architecture, Kubernetes, Information Technology, Apache Kafka, Api Design, Docker, Jenkins, Static Application Security Testing, Golang, Dynamic Application Security Testing
- **Published:** October 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a9ed5a614020b926

## About the Role

This is a hands-on engineering role suited for someone who enjoys solving security problems through a combination of software engineering, automation, security testing, research, and collaboration. You will have opportunities to work across modern application architectures, APIs, cloud and container environments, CI/CD pipelines, and application security technologies while continuing to grow your cybersecurity and engineering expertise.

You will also contribute to the continuous improvement of application security processes, tooling, documentation, and engineering practices that help protect American Express applications, systems, and data.

 * Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience; advanced degree preferred
 * Knowledge of regulatory compliance and security standards
 * Knowledge of Application Development & Security
 * Knowledge of Data Engineering
 * Knowledge of Cloud Security Management
 * Knowledge of Data Privacy & Protection (DPP, GDPR)
 * Knowledge of Data Security Management
 * Knowledge of scripting languages such as Python, Bash, or PowerShell for automating security tasks
 * Knowledge of distributed (multi-tiered) systems, algorithms, NoSQL and relational databases
 * Knowledge of the core tools used in the planning, analyzing, crafting, building, testing, configuring, and maintaining of assigned application(s)
 * knowledge of event driven architecture and messaging: Kafka, web hooks, asynchronous API design preferred.
 * Experience in application design, software development, and automated testing
 * Experience in object-oriented design and coding with variety of languages
 * Experience in distributed (multi-tiered) systems, algorithms, and relational databases
 * Experience in Agile software development methodologies and practices such as Scrum/Kanban, iterations, user stories
 * Experience in automation testing and documentation (i.e. automated, functional, and performance)
 * Experience with Testing Frameworks: Unit testing, Regression Testing
 * Experience with Java 8+, Spring Suite Framework preferred
 * Experience with Python, Django framework preferred
 * Experience with React JS, Node JS, Go-lang preferred
 * Experience with Kubernetes, Docker, Jenkins, Cloud deployment (CI/CD) preferred
 * Experience with PostgreSQL, Oracle, or equivalent relational databases preferred
 * Knowledge of AI security concepts, including risks associated with generative AI, model integrity, prompt security, and protection of sensitive enterprise data
 * Knowledge of AI-assisted cybersecurity operations and automation frameworks used to enhance detection, response, and security engineering workflows
 * At least one security related certification preferred like: CSSLP, GWEB, GCIH, CEH, GSEC, C|ASE, CCNA, etc. At least one developer related certification preferred like: OCP. OCA, OCM, DCD, DVA-C02, CKAD, ACE, CCSP, Profession Cloud Developer, etc.
*

## Description

You will work closely with software engineers, architects, product teams, and cybersecurity partners to identify and reduce security risk throughout the application lifecycle. You will contribute to the development and operation of security capabilities, help integrate security testing and controls into engineering workflows, analyze vulnerabilities and emerging threats, and provide technical guidance that enables teams to remediate security issues effectively.