Cybersecurity Engineer III

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Cybersecurity Engineer III will design, develop, and support Agentic AI and automation capabilities that strengthen cybersecurity compliance, audit readiness, ServiceNow CMDB data quality, and enterprise asset governance. This role will apply Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and AI agent workflows to automate security and compliance responses, improve asset classification, reconcile inventory data, and enhance continuous monitoring of cybersecurity and operational risk. Agentic AI Development & Audit Automation Design and deploy AI agents to analyze, interpret, and respond to security, compliance, regulatory, and audit requests. Use historical audit responses, security documentation, policies, standards, and evidence repositories to train AI agents that generate accurate, consistent, and context-aware responses to future audit requests. Create prompt engineering strategies, retrieval methods, and evaluation approaches that improve AI response quality and accuracy. Monitor, test, and improve AI agent performance through feedback loops and measurable quality metrics. Partners with Security, Risk, Compliance, Audit, Engineering, ITAM, and ServiceNow teams to implement AI-enabled security and asset governance capabilities. Design automated controls that reconcile newly discovered assets with ServiceNow CMDB inventory. Build reconciliation logic to measure: Inventory completeness Data accuracy Classification accuracy Coverage across discovery sources Asset lifecycle consistency CMDB, Asset Governance & Risk Automation Develop automation to improve the completeness, consistency, and accuracy of ServiceNow Configuration Item (CI) attributes. Use discovery, topology, relationships, metadata, and inventory data to identify anomalies, gaps, duplicates, stale records, and misclassified assets. Develop recommendation engines, dashboards, and metrics to support CMDB health, data governance, and asset visibility. Create AI-powered workflows that continuously assess CMDB data quality and recommend remediation actions. Develop AI capabilities that review ServiceNow CMDB records and determine whether Configuration Items are classified correctly. Support governance processes through automated evidence generation and continuous monitoring. Education Bachelor’s degree in computer science, Cybersecurity, Information Systems, Data Science, Engineering, Information Technology, or a related technical field, or equivalent practical experience. Experience 2–4 years of experience in information security, cybersecurity engineering, IT Asset Management, ServiceNow, data engineering, automation, or related technical roles. Experience developing AI-powered workflows, LLM-backed applications, prompt engineering solutions, or Agentic AI capabilities. Experience translating audit, security, and business requirements into scalable technical solutions. Technical Skills Knowledge of AI agent orchestration, RAG, embeddings, vector search, AI evaluation, and enterprise knowledge retrieval. Experience with ServiceNow CMDB, CIs, ITAM, ITOM, Discovery, CMDB Health, or related asset management capabilities. Proficiency in Python, JavaScript, PowerShell, REST APIs, JSON, or similar tools for automation, integration, and data processing. Ability to analyze structured and unstructured data to identify patterns, risks, anomalies, and automation opportunities. Core Competencies Strong analytical, problem-solving, and critical thinking skills. Ability to work across technical, audit, security, and governance stakeholders. Clear written and verbal communication skills for technical and non-technical audiences. Preferred Qualifications Experience in regulated industries or audit frameworks such as SOC 2, NIST, PCI DSS, or FFIEC. Experience integrating ServiceNow with security, endpoint, cloud, infrastructure, or discovery platforms. Experience implementing retrieval-augmented generation (RAG) architecture. Experience improving CMDB health, data quality, asset governance, or reporting through automation. Experience with ServiceNow Performance Analytics, Power BI, or similar analytics tools. Relevant ServiceNow, AI, cloud, or cybersecurity certifications. Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, American Express may provide visa sponsorship for certain positions.