Campus Graduate Masters Full-Time Senior Associate - 2027 Cybersecurity Analyst, Enterprise Technology Services- New York, NY

We need to output HTML fragment with sections: About the role? The description includes "Business Unit / Role Specific Info" which is about the role. Then "Responsibilities", "Qualifications", "About Us", "About The Team". Also there is a salary range mention: "The below represents the expected salary range for this job requisition." but no actual numbers given. So we cannot create Pay section because no specific numbers. Benefits: The "About The Team" includes benefits list. So we can create Benefits section with that list. Schedule: Not mentioned. So omit. We must not repeat job title as heading. Use

for section headings. Use

• for any list of duties/requirements/benefits. Use

  for prose. We need to preserve all substantive information, remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove "Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions." That's maybe considered boilerplate? It's a requirement but maybe keep? It's substantive? It's a requirement about eligibility. Might keep as part of Qualifications? But it's not a qualification per se. Could be placed in a short p under Qualifications? Might be considered boilerplate? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. This is about employment eligibility and visa sponsorship; not exactly EEO but could be considered legal. Might remove. Safer to keep? The instruction says remove legal boilerplate. This is a legal requirement about work eligibility. I'd remove it. Also remove "Our team reviews applications on a rolling basis..." that's application instructions; remove. Also remove "For a full list of Team Amex benefits, visit our Colleague Benefits Site ." maybe keep as part of benefits? It's a link; could keep but it's a reference. Might keep as part of benefits prose. Also remove "American Express is an equal opportunity employer..." that's EEO boilerplate; remove. Also remove "We back our colleagues with the support they need..." maybe keep? It's part of About Us? Might be considered fluff but it's substantive about culture. Keep. Also remove "US Job Seekers - Click to view the “ Know Your Rights ” poster..." that's legal; remove. Also remove "The below represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors." That's about pay but no numbers; we cannot create Pay section because no specific content. So we should omit Pay section entirely. Now structure: We need sections: About the role (maybe heading "About the role") from Business Unit / Role Specific Info paragraph. Responsibilities: list. Qualifications: maybe split into Minimum Qualifications and Preferred Qualifications? Could combine but better to have subheadings? The instruction only says use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid subheadings within? Probably we should stick to those headings only. So we can have Qualifications heading and include both minimum and preferred as prose or lists. Benefits: from About The Team benefits list. We also have About Us and About The Team descriptive paragraphs; maybe combine into About the company? Could create a section "About the company" but not in allowed headings. Allowed headings list includes About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. No "About Us". But we could put that prose under About the role? Or maybe we can omit About Us as not required? The instruction: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. It didn't say we must include About Us; we can omit if not in allowed headings. However we might lose substantive info. But we could incorporate that info into About the role section as prose. The About the role section already has the Business Unit / Role Specific Info. We could add the About Us and About The Team paragraphs there as additional prose. Thus final HTML:

  About the role

  [combined paragraphs from Business Unit / Role Specific Info, About Us, About The Team descriptive parts (excluding benefits list)]

  Responsibilities

  • ... each responsibility

  Qualifications

  [Minimum Qualifications prose]

  [Preferred Qualifications prose]

  Benefits

  • ... each benefit
  We must not include empty sections. Now extract content. Business Unit / Role Specific Info paragraph: "The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company. At American Express, we empower technologists to learn, innovate, and make an impact from day one. As a Cybersecurity Analyst in Enterprise Technology Services, you’ll join a full-time graduate program and contribute to work that helps protect American Express information systems, customer data, colleague experiences, and digital assets. Cybersecurity teams help identify, reduce, monitor, and respond to technology and information security risks. In this role, you may support cybersecurity operations, security architecture, identity and access management, endpoint protection, application security, security monitoring, cloud security, documentation, and AI-enabled cybersecurity workflows while collaborating with cybersecurity teams, product partners, software development teams, operations teams, and business stakeholders." That's the role description. About Us paragraph: "At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express." About The Team descriptive paragraph before benefits: "We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:" Then benefits list follows. We should include that introductory sentence as part of Benefits section preamble maybe. Now Responsibilities list: - Supports in monitoring security systems and events using a variety of tools, alerts, and logs to identify potential threats and vulnerabilities, ensuring timely detection and prevention of security or operational issues - Triages and investigates security or operational issues to determine root causes, impacts, and potential mitigation strategies, helping to prevent future incidents and minimize damage - Support secure network, endpoint, identity, access management, application security, and cloud security activities under guidance from experienced engineers. - Assist with security documentation, assessment findings, remediation tracking, reporting, and control implementation activities that support compliance and security posture improvements. - Collaborate with software development and product teams to help integrate security into the software development lifecycle and support secure coding practices. - Research emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making. - Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation. - Support security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services. - Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements. - Collaborate across cybersecurity, engineering, product, risk, operations, and business teams to strengthen secure technology delivery and enterprise risk reduction. Now Qualifications: Minimum Qualifications paragraph: "Must have earned a Master’s degree in Cybersecurity, Computer Science, Information Systems, Computer Engineering, Engineering, or another technical field before the full-time start date. Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts. Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts. Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies. Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment." Preferred Qualifications paragraph: "Students must have a graduation date between December 2026 and June 2027. Coursework, projects, internships, labs, competitions, research, or extracurricular experience in cybersecurity, information security, artificial intelligence, machine learning, software development, cloud, data, networking, or technology risk. Awareness of security standards, regulatory compliance, data privacy, data protection, security governance, and risk management concepts. Familiarity with security monitoring, threat detection, vulnerability management, incident response, endpoint protection, network security, or identity and access management concepts. Exposure to security tools, platforms, or operational processes used to investigate alerts, analyze threats, document findings, or support remediation activities. Interest in application security, secure coding, DevSecOps, cloud security, IAM, data security, network security, or AI security. Awareness of AI-enabled cybersecurity capabilities and emerging risks such as prompt injection, model misuse, data exposure, AI-assisted security operations, and automation-enabled analysis. Interest in cybersecurity certifications or continued learning; certifications are not required for early-career consideration. Strong problem solving, curiosity, ownership, professionalism, ethical judgment, and comfort learning new technologies in a fast-paced environment." Now Benefits list from About The Team: - Competitive base salaries - Bonus incentives - 6% Company Match on retirement savings plan - Free financial coaching and financial well-being support - Comprehensive medical, dental, vision, life insurance, and disability benefits - Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need - 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy - Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) - Free and confidential counseling support through our Healthy Minds program - Career development and training opportunities Also there is a line: "For a full list of Team Amex benefits, visit our Colleague Benefits Site ." Could include as a link but it's a reference; we could include as a p after list. Now About the role section should combine Business Unit / Role Specific Info, About Us, and the introductory sentence about benefits? Actually the introductory sentence about benefits is part of About The Team; we could keep it as part of Benefits section preamble. Thus About the role section will have two paragraphs: first the Business Unit / Role Specific Info, second the About Us paragraph. Now ensure no boilerplate: removed EEO, visa sponsorship, application instructions, Know Your Rights poster, equal opportunity, etc. Now produce HTML. Check for any list that should be
  • . Responsibilities, Qualifications (maybe we keep as

    for each bullet? But qualifications are lists of items; better to use

    • . The instruction: Use
      • for any list of duties/requirements/benefits. So for Qualifications