Cyber Security Engineer-CNAPP (AWS, GCP, OCI AND/ OR Azure) at American Express
Atlanta, GA
$89,250–$150,250from the description
Jul 22, 2026
Atlanta, GA
Jul 23, 2026
What this job asks for AI summary
A cloud security engineering role focused on operating and expanding a multi-cloud CNAPP platform (such as Palo Alto Cortex or Wiz) across AWS, Azure, GCP, and OpenShift environments. Day-to-day work involves triaging security signals, enforcing policy-as-code guardrails, integrating CNAPP tooling into CI/CD pipelines and SIEM/SOAR systems, and supporting engineering teams in remediating misconfigurations and identity risks. Suits engineers with hands-on CSPM, CWPP, and container security experience in large-scale cloud environments.
Mid level · 3+ years · Phoenix-Mesa-Chandler, AZ · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 35 people in the Phoenix-Mesa-Chandler, AZ area plausibly meet what this posting asks for (information security analysts). range 7–60
Applicant volume Light — Few people clear these requirements, so an application that does clear them gets looked at. Worth applying to even if you miss a nice-to-have.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $133,227 (middle half $100,196–$163,968). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The role is posted with two primary locations — Phoenix, AZ and Atlanta, GA — both hybrid. The Phoenix CBSA is used as the primary metro; Atlanta (CBSA 12060) is an equally valid work location.
SOC classification is Medium confidence: the role is primarily security analysis and posture management (CNAPP/CSPM/CWPP/CIEM), pointing to 15-1212, but it also involves substantial hands-on engineering — policy-as-code, Terraform IaC, CI/CD integration, and automation — which could support 15-1252. Security analysis is the dominant framing.
Seniority is assessed as Mid despite the 3+ year gate and broad scope, because the title carries no level modifier and the experience floor (3+ years) aligns with mid-level. The wide salary range ($89K–$150K) spans mid-to-senior, but the minimum requirement does not clearly demand senior-level ownership.
Palo Alto Cortex is listed as the primary named CNAPP tool in the required qualifications; Wiz and Prisma Cloud appear as named alternatives or context elsewhere in the posting.
Sentinel here refers to HashiCorp Sentinel (policy-as-code), not Microsoft Sentinel (SIEM) — the posting explicitly pairs it with 'Hashi Sentinel' and OPA in the policy-as-code context.
DSPM (Data Security Posture Management) appears in the required responsibilities section and is captured as a required capability.
CIS Benchmarks, NIST, and Agile appear under the Preferred Qualifications section.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.