Cybersecurity Intern at American… · New York

Summary: American Express Global Business Travel is a company that values travel as a force for good, fostering an inclusive and collaborative culture. They are seeking a Cyber Security Engineer Intern to assist with the planning and implementation of security controls and platforms, while also ensuring the protection of the organization's data and infrastructure. Responsibilities: - Working with CyberSecurity Architects team for the planning, proposal and implementation of security controls and platforms - Working knowledge in the field of CyberSecurity, including but not limited to Cloud deployments, application integration, and APIs - Project level experience working in a team environment with multiple parallel workflows, team members, Project Managers, and defined deliverables - Identify and define system security requirements including requirements for achieving audit requirements - Preparing and documenting standard operating procedures and protocols for the Projects and workflows that the Engineer is participating in for the team - Configure and troubleshoot security infrastructure devices as necessary for a smooth and highly available set of controls - In a team environment, develop technical solutions and deploy security tools to help mitigate security vulnerabilities and automate repeatable tasks - Troubleshooting and diagnostic skills for the purpose of providing long term actionable solutions and remediation of issues - Responding to and participating in incidents as a representative of the CyberSecurity Engineering team - Ensuring that the organization's data and infrastructure are protected by enabling and maintaining security controls. This includes Gap Analysis as necessary - Participating in the change management process - Daily administrative tasks, reporting and communication with the relevant stakeholders, managers and directors - Delivering comprehensive reports including assessment-based findings, outcomes and solutions for increased system security enhancements - Working as part of a team with similarly tasked Engineers and Analysts in a diverse, engaging, supportive and respectful manner Required Qualifications: - Analytical mind and a detailed understanding of cyber security methodologies - Meticulous attention to detail - Outstanding problem-solving skills - Ability to work comfortably under pressure and deliver on tight deadlines - Excellent understanding of technology infrastructures including but not limited to Encryption, Certificates, Security governance and oversight, Security Controls, Security tooling, and Security policies and procedures - Comfortable working with a variety of technologies, large scale deployments, security problems and troubleshooting - Providing CyberSecurity engineering deliverables in a secure/compliant manner - Working knowledge in the field of CyberSecurity, including but not limited to Cloud deployments, application integration, and APIs - Project level experience working in a team environment with multiple parallel workflows, team members, Project Managers, and defined deliverables - Identify and define system security requirements including requirements for achieving audit requirements - Preparing and documenting standard operating procedures and protocols for the Projects and workflows - Configure and troubleshoot security infrastructure devices as necessary for a smooth and highly available set of controls - Develop technical solutions and deploy security tools to help mitigate security vulnerabilities and automate repeatable tasks - Troubleshooting and diagnostic skills for providing long term actionable solutions and remediation of issues - Responding to and participating in incidents as a representative of the CyberSecurity Engineering team - Ensuring that the organization's data and infrastructure are protected by enabling and maintaining security controls - Participating in the change management process - Daily administrative tasks, reporting and communication with the relevant stakeholders, managers and directors - Delivering comprehensive reports including assessment-based findings, outcomes and solutions for increased system security enhancements - Working as part of a team with similarly tasked Engineers and Analysts in a diverse, engaging, supportive and respectful manner - Knowledge of risk assessment tools, technologies and methods - Experience designing secure networks, systems and application architectures - Use and deployment of encryption for data protection at rest and in transit for contractual, regulatory and audit requirements - Direct experience with implementation of security tools such as WAF, DAM, IPS/IDS, Anti-DDoS, Bot Detection, SIEM, Data Leakage Prevention, Proxy, Automation & Orchestration - Experience working in a team environment for planning, researching and developing security policies, standards and procedures - Ability to communicate security issues to peers and management - Detailed technical knowledge of database and operating system security - Experience with network security and networking technologies and with system, security, and network monitoring tools - Thorough understanding of the latest security principles, techniques, and protocols - Maintaining current knowledge of technology capabilities and trends - Problem solving skills and ability to work under pressure - Understanding of the OSI (Open Systems Interconnection) model and well-known ports and services - BS degree in Computer Science, Cyber Security or related field or equivalent work experience Preferred Qualifications: - Industry certifications in cyber security such as but not limited to, CISSP, GSEC, CSSP, CEH highly desired Required Skills: Cybersecurity methodologies, Encryption, Security governance, Security controls, Security tooling, Security policies, procedures, Cloud deployments, Application integration, APIs, Risk assessment tools, Secure network design, System architecture design, Application architecture design, Data protection encryption, WAF, DAM, IPS/IDS, Anti-DDoS, Bot detection, SIEM, Data leakage prevention, Proxy, Automation, orchestration, Database security, Operating system security, Network security, Networking technologies, System monitoring tools, Security monitoring tools, Security principles, Security techniques, Security protocols, OSI model, Industry cybersecurity certifications Benefits: Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family., Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals., Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first., We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common identities or initiatives, to discuss challenges, obstacles, achievements, and drive company awareness and action., And much more!