Job Description
You Lead the Way. We’ve Got Your Back.
With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.
At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.
Join Team Amex and let's lead the way together.
How will you make an impact in this role?
This position is a Full-Time Information Security Analyst - Quantum /AI ML / General Security Engineer opportunity to demonstrate knowledge gained and apply it in a dynamic, high-performing Technology Risk & Information Security team. Responsible for assisting with activities designed to systematically run information security, such as security investigations, intelligence, assurance, and/or other project oversight, including developing standard methodologies for information security standards and handling IT controls and compliance with regulatory guidance.
What type of work can you expect?
What type of work can you expect to do in Information Security at American Express?
Quantum Security
Quantum security is a burgeoning field that addresses the vulnerabilities exposed by quantum computing. With the potential to break traditional encryption methods, quantum computing necessitates a new approach to cybersecurity.
PQC – Post Quantum Cryptography. Crypto Agility.
Experience as a researcher, including internships, full-time, or at a lab.
Experience contributing research communities or efforts, including publishing papers in major conferences or journals.
Experience with one or more general purpose programming languages (e.g., Python, Java, JavaScript, C/C++, etc.).
Currently enrolled in a Bachelor's program in Quantum, AI/ML, Computer Science, Computational Math, Statistics, Combinatorics & Optimization or related technical field.
AI/ML GenAI Security
Security initiatives supporting Generative AI Enablement.
Strong foundation in AI, machine learning, and data science.
Experience with AI/ML frameworks.
Experience with one or more general purpose programming languages (e.g., Python, Java, JavaScript, C/C++, etc.).
Currently enrolled in a Bachelor's program in AI/ML, Quantum, Computer Science, Computational Math, Statistics, Combinatorics & Optimization or related technical field.
Application, Infrastructure and Network Security
Drive risk reduction through the rapid identification and remediation of vulnerabilities across the enterprise.
Deliver secure solutions that enable secure operations and highly available products and services for our customers.
Safeguard AXP data, customers, and brand through continuous monitoring and testing of production application environments.
Threat Modeling, Secure Design, Secure Coding, Application Hardening, DAST, SAST, SCA, RASP.
Governance, Risk, Compliance
Bridge traditional boundaries between cyber and IT risk and expanding partnerships with IT and the business to drive risk reduction in the enterprise.
Innovate Risk Management through enhancements in tooling and automation of processes; expand the capabilities of technology risk management.
Extend risk management and control expertise beyond the information security domains into IT development organizations and the business.
Identify and help mitigate IT and information security risk across people, processes, and technologies.
Security Incident Response/Threat Intelligence
Act as the front line of defence at American Express protecting the brand, employees, assets and card members across the globe against threats 24/7/365.
Minimize risk of cyber-attacks and focus on detection and response to threats.
Monitor, detect, and respond to security events and incidents that affect AXP globally.
Data Loss Prevention
Protect our customers, partners, and colleagues from the loss of sensitive information through normal business processes and/or malicious actors.
Monitor and block sensitive data loss where legally permissible.
Identity and Access Management/Authentication.
Provide authentication, authorization, and full lifecycle management capabilities.
Reduce, manage, and monitor risk associated with identity and access to AXP resources.
Cryptography/Encryption Services
Protect all forms of sensitive information, on all platforms, resulting in protection of the Brand and information assets, and regulatory compliance.
Drive continuous enhancement to data protection.
Minimum Qualifications
Current enrolment in Cyber Security, Computer Science, Software Engineering, Information Systems, or related field preferred.
Target graduation date in summer of 2026.
Must be able to work from our office in Toronto area, Ontario, 3 days a week as this is a hybrid internship.
In-depth knowledge of cyber threats along with common security controls, detection capabilities, and other practices / solutions for securing digital environments.
Application Development experience in Java/JEE, Spring & MVC concepts, NodeJS / Go / Python / Kotlin, HTML/CSS, JavaScript, ReactJS, Redux, DevOps - Git, Maven/Gradle, Databases etc.
Understanding of what information or assets are of value to threat actors and how organizations are breached.
In-depth understanding of modern technical security controls (i.e. firewalls, SIEMS, IPS, HIPS, web proxies, Threat Model, DAST, SAST).
Must have strong verbal and written communication skills; interpersonal collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
Can apply a variety of structured analytic techniques to generate and test a hypothesis, assess cause and effect, challenge analysis, and support decision making.
Preferred Qualifications
Understanding on Application Security, OWASP Top 10 (Web, API. mobile), Cloud Security, DevSecOps.
Familiarity with Agile/Scrum development process.
Familiarity with project collaboration and management tools like JIRA and Confluence dashboard and workflows to track action items within projects and consultation requests.
Language skills in Spanish or Portuguese are an asset.
Hiring Range: $85,000 to $115,000 annually
Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, (company) may provide visa sponsorship for certain positions. Terms and Conditions of any potential sponsorship would be provided to successful candidates.
We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities
American Express is committed to providing an inclusive and accessible work environment in which all people who apply for positions or who work for or on behalf of Amex are treated with dignity and respect and are provided with equal treatment with respect to employment, regardless of that person's age, sex, ****** orientation, gender identity, gender expression, race, colour, ancestry, ethnic or national origin, citizenship, religion or creed, marital status, family status, pregnancy, disability, record of offences, social condition or origin, political beliefs, association or activity or other factors prohibited under applicable Human Rights legislation (the “Prohibited Grounds”). If you have a disability and need accommodation, please speak with the Recruiter for more information.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.
At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.
Join Team Amex and let's lead the way together.
How will you make an impact in this role?
This position is a Full-Time Information Security Analyst - Quantum /AI ML / General Security Engineer opportunity to demonstrate knowledge gained and apply it in a dynamic, high-performing Technology Risk & Information Security team. Responsible for assisting with activities designed to systematically run information security, such as security investigations, intelligence, assurance, and/or other project oversight, including developing standard methodologies for information security standards and handling IT controls and compliance with regulatory guidance.
What type of work can you expect?
What type of work can you expect to do in Information Security at American Express?
Quantum Security
Quantum security is a burgeoning field that addresses the vulnerabilities exposed by quantum computing. With the potential to break traditional encryption methods, quantum computing necessitates a new approach to cybersecurity.
PQC – Post Quantum Cryptography. Crypto Agility.
Experience as a researcher, including internships, full-time, or at a lab.
Experience contributing research communities or efforts, including publishing papers in major conferences or journals.
Experience with one or more general purpose programming languages (e.g., Python, Java, JavaScript, C/C++, etc.).
Currently enrolled in a Bachelor's program in Quantum, AI/ML, Computer Science, Computational Math, Statistics, Combinatorics & Optimization or related technical field.
AI/ML GenAI Security
Security initiatives supporting Generative AI Enablement.
Strong foundation in AI, machine learning, and data science.
Experience with AI/ML frameworks.
Experience with one or more general purpose programming languages (e.g., Python, Java, JavaScript, C/C++, etc.).
Currently enrolled in a Bachelor's program in AI/ML, Quantum, Computer Science, Computational Math, Statistics, Combinatorics & Optimization or related technical field.
Application, Infrastructure and Network Security
Drive risk reduction through the rapid identification and remediation of vulnerabilities across the enterprise.
Deliver secure solutions that enable secure operations and highly available products and services for our customers.
Safeguard AXP data, customers, and brand through continuous monitoring and testing of production application environments.
Threat Modeling, Secure Design, Secure Coding, Application Hardening, DAST, SAST, SCA, RASP.
Governance, Risk, Compliance
Bridge traditional boundaries between cyber and IT risk and expanding partnerships with IT and the business to drive risk reduction in the enterprise.
Innovate Risk Management through enhancements in tooling and automation of processes; expand the capabilities of technology risk management.
Extend risk management and control expertise beyond the information security domains into IT development organizations and the business.
Identify and help mitigate IT and information security risk across people, processes, and technologies.
Security Incident Response/Threat Intelligence
Act as the front line of defence at American Express protecting the brand, employees, assets and card members across the globe against threats 24/7/365.
Minimize risk of cyber-attacks and focus on detection and response to threats.
Monitor, detect, and respond to security events and incidents that affect AXP globally.
Data Loss Prevention
Protect our customers, partners, and colleagues from the loss of sensitive information through normal business processes and/or malicious actors.
Monitor and block sensitive data loss where legally permissible.
Identity and Access Management/Authentication.
Provide authentication, authorization, and full lifecycle management capabilities.
Reduce, manage, and monitor risk associated with identity and access to AXP resources.
Cryptography/Encryption Services
Protect all forms of sensitive information, on all platforms, resulting in protection of the Brand and information assets, and regulatory compliance.
Drive continuous enhancement to data protection.
Minimum Qualifications
Current enrolment in Cyber Security, Computer Science, Software Engineering, Information Systems, or related field preferred.
Target graduation date in summer of 2026.
Must be able to work from our office in Toronto area, Ontario, 3 days a week as this is a hybrid internship.
In-depth knowledge of cyber threats along with common security controls, detection capabilities, and other practices / solutions for securing digital environments.
Application Development experience in Java/JEE, Spring & MVC concepts, NodeJS / Go / Python / Kotlin, HTML/CSS, JavaScript, ReactJS, Redux, DevOps - Git, Maven/Gradle, Databases etc.
Understanding of what information or assets are of value to threat actors and how organizations are breached.
In-depth understanding of modern technical security controls (i.e. firewalls, SIEMS, IPS, HIPS, web proxies, Threat Model, DAST, SAST).
Must have strong verbal and written communication skills; interpersonal collaborative skills; and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
Can apply a variety of structured analytic techniques to generate and test a hypothesis, assess cause and effect, challenge analysis, and support decision making.
Preferred Qualifications
Understanding on Application Security, OWASP Top 10 (Web, API. mobile), Cloud Security, DevSecOps.
Familiarity with Agile/Scrum development process.
Familiarity with project collaboration and management tools like JIRA and Confluence dashboard and workflows to track action items within projects and consultation requests.
Language skills in Spanish or Portuguese are an asset.
Hiring Range: $85,000 to $115,000 annually
Depending on factors such as business unit requirements, the nature of the position, cost and applicable laws, (company) may provide visa sponsorship for certain positions. Terms and Conditions of any potential sponsorship would be provided to successful candidates.
We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities
American Express is committed to providing an inclusive and accessible work environment in which all people who apply for positions or who work for or on behalf of Amex are treated with dignity and respect and are provided with equal treatment with respect to employment, regardless of that person's age, sex, ****** orientation, gender identity, gender expression, race, colour, ancestry, ethnic or national origin, citizenship, religion or creed, marital status, family status, pregnancy, disability, record of offences, social condition or origin, political beliefs, association or activity or other factors prohibited under applicable Human Rights legislation (the “Prohibited Grounds”). If you have a disability and need accommodation, please speak with the Recruiter for more information.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
💡 Quick Summary
Seeking a career-building opportunity? The Campus Undergrad Full-Time - 2026 Cybersecurity Engineer position is now open for candidates interested in the Education Jobs sector. This role in Toronto offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Education Jobs is a plus.
