Skip to main content
American Express logo

Senior Associate - Vulnerability Remediation Management Specialist

American Express

New York, NY · HybridFull-time$89–150K/yrSeen todaySeen in employer's feed today

See where you stand before you apply. No sign-up to start.

You apply on the posting's application page, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$89–150K/yr
Location
New York, NYHybrid
Schedule
Full-time
Work Authorization
Not specified

Olive focuses on jobs in the United States, including remote roles you can work from there.

Job overview

American Express is seeking a Senior Associate to join its Penetration Testing function’s Remediation team. The role manages the vulnerability lifecycle, coordinates remediation, assesses security risks, performs retesting, and oversees Bug Bounty and Responsible Disclosure Programs. It also involves communicating findings to development teams, tracking remediation metrics, and reporting status to stakeholders. The position is hybrid and available in Phoenix or New York.

Skills & qualifications

RequiredNice to have

Skills

Penetration Testing Methodologies, requiredOWASP Top 10, requiredVulnerability Management, requiredRisk Assessment, requiredCVSS Scoring, requiredBurp Suite, requiredNmap, requiredOWASP ZAP, requiredJira, requiredServiceNow, requiredBug Bounty, requiredResponsible Disclosure, requiredCommunication, requiredAnalytical Skills, requiredStakeholder Management, requiredVulnerability Validation, nice to haveRemediation Tracking, nice to haveVulnerability Retesting, nice to have

Qualifications

3+ Years Cybersecurity Experience, nice to haveCEH Certification, nice to haveeJPT Certification, nice to haveCompTIA Security+ Certification, nice to haveUS Employment Eligibility, required

Full job description

Senior Associate - Vulnerability Remediation Management Specialist

  • Phoenix, AZ, United States

  • New York, NY, United States

(Hybrid)

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

We are looking for a Senior Associate-Vulnerability Remediation Management Specialist to join the Remediation team within the Penetration Testing function. The role will focus on managing the end-to-end vulnerability lifecycle, coordinating remediation activities, assessing security risks, performing vulnerability retesting, and managing Bug Bounty and Responsible Disclosure Programs.

Responsibilities

  • Vulnerability Management: Track and manage vulnerabilities identified through penetration testing, Bug Bounty, and Responsible Disclosure Programs.

  • Risk Assessment: Evaluate and prioritize vulnerabilities based on severity, exploitability, and business impact.

  • Remediation Coordination: Communicate security findings and remediation recommendations to development teams, ensuring timely resolution within defined SLAs.

  • Vulnerability Retesting: Validate remediation fixes through technical retesting and maintain closure evidence.

  • Bug Bounty & Responsible Disclosure: Manage vulnerability submissions, coordinate validation and remediation, and communicate with external security researchers.

  • Reporting & Governance: Maintain vulnerability dashboards, track remediation metrics, and provide regular status updates to stakeholders.

Qualifications

Required Skills

  • Basic understanding of penetration testing methodologies and OWASP Top 10 vulnerabilities.

  • Knowledge of vulnerability management, risk assessment, and CVSS scoring.

  • Familiarity with security testing tools such as Burp Suite, Nmap, and OWASP ZAP.

  • Experience with vulnerability tracking tools such as Jira or ServiceNow.

  • Understanding of Bug Bounty and Responsible Disclosure processes.

  • Strong communication, analytical, and stakeholder management skills.

Preferred Experience

  • 3–6 years of experience in cybersecurity, penetration testing, application security, or vulnerability management.

  • Hands-on experience in vulnerability validation, remediation tracking, and retesting.

  • Certifications such as CEH, eJPT, or CompTIA Security+ are an advantage.

Role Focus: This is primarily a vulnerability management and remediation coordination role requiring foundational penetration testing knowledge, technical validation capabilities, and strong stakeholder management skills.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.

Job Info

  • Job Identification 26016269

  • Job Category Technology

  • Posting Date 11/12/2026, 11:44 PM

  • Apply Before 11/30/2026, 06:00 AM

  • Job Schedule Full time

  • Job Shift Day

  • Locations AMEX 18850 North 56th Street, Phoenix, AZ, 85054, USAMEX World Financial Center, New York, NY, 10285, US(Hybrid)

  • Salary Range $89250 - $150250 annually + bonus + benefits

  • Career Area Technology

Return to Jobs List (https://careers.americanexpress.com/en/sites/CX\_1/jobs)

How this job compares

Set against the 453 open Application Security jobs on Olive Jobs, counted November 13, 2026.

Pay
  • This posting$89–150K/yr
  • New York median$131–234K/yr29 salary ranges
  • US median$110–202K/yr403 salary ranges

This range's midpoint, $120K, is 33% below the New York median midpoint ($180K) — in the lowest quarter of Application Security salary ranges in New York.

Openings
Olive Jobs lists 30 open Application Security jobs in New York and 453 across the US. 8% of them nationwide are listed as remote or flexible.
Hiring the most in New York
Experience
This posting asks for at least 6 years of experience; Application Security postings that state a minimum ask for 5 years at the median (330 postings).
Education
78 of the 453 open Application Security jobs (17%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 13, 2026. Figures based on too few postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.