Sr. Application Security Engineer

Amex GBT is seeking an experienced Senior Application Security Engineer to join their remote team in the corporate travel industry. This role requires a blend of development and security expertise to secure cloud-native infrastructure, integrate security into CI/CD pipelines, and mentor junior engineers. You will focus on secure coding practices, API security, and evaluating AI coding tools.

• Design and implement secure CI/CD pipelines with integrated security testing
• Implement and tune automated security scanning (SAST, DAST, SCA, container scanning)
• Deploy and support API security tools
• Collaborate with development teams on secure coding practices
• Evaluate and govern secure use of agentic AI coding tools
• Ensure compliance with PCI-DSS, GDPR, and SOC 2