Campus – Full Time – Information Security Engineer – 2027 (UK – Burgess Hill)

Overview

You join a global team to help protect American Express information systems and digital assets. As a Cybersecurity Engineer in the graduate program, you’ll work across security domains to support secure architecture, IAM, endpoint protection, cloud security, and more. You’ll collaborate with engineering, product, risk, and operations teams to embed security into the software development lifecycle. You’ll explore emerging threats and AI-enabled security tools to improve defenses. This role offers hands-on learning and meaningful impact in a fast-paced environment.

Responsibilities

• Support secure network, endpoint, identity, access management, application security, and cloud security activities under guidance from experienced engineers
• Assist with security documentation, assessment findings, remediation tracking, reporting, and control implementation activities that support compliance and security posture improvements
• Collaborate with software development and product teams to help integrate security into the software development lifecycle and support secure coding practices
• Research emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making
• Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation
• Support security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services
• Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements
• Collaborate across cybersecurity, engineering, product, risk, operations, and business teams to strengthen secure technology delivery and enterprise risk reduction

Key requirements

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, Computer Engineering, Engineering, or another technical field
• Graduation date between December 2026 and June 2027
• Foundational understanding of cybersecurity concepts across security domains
• Foundational knowledge of network protocols, IAM, data privacy, and secure software development concepts
• Interest in scripting or automation (e.g., Python, Bash, PowerShell)
• Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility
• Must have a drive to work in a team environment

• Strong communication
• Collaboration
• Analytical thinking
• Cybersecurity fundamentals
• Network security
• Identity and access management

…