Campus Graduate Masters Summer Internship Program - 2027 Cybersecurity Analyst, Enterprise Technology Services- New York, NY
for section headings (e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should not repeat job title. We should not include Job ID etc. We should preserve all substantive info, remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions). Also we should not include sections with placeholder text like "commensurate with experience". We need to include Pay/Schedule/Benefits only if posting actually states them. The posting mentions "Competitive base salaries" under About The Team benefits. Also mentions "Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex". So we have Benefits and Schedule info. Pay: "Competitive base salaries" is mentioned but not a specific range. The instruction says: never emit a heading followed by filler/placeholder text (e.g., "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. "Competitive base salaries" is somewhat vague but it's a statement about pay. It's not a specific number, but it's still stating that there are competitive base salaries. Is that considered filler? It's not a specific number, but it's still a statement. The instruction says avoid placeholder like "commensurate with experience". "Competitive base salaries" is similar but maybe acceptable? It's not a specific number but it's a statement. The instruction says "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state "Competitive base salaries". So we can include a Pay section with that statement. However we need to be careful: they said "Prefer a few substantive sections over many thin ones." So maybe combine Benefits and Pay? But they want separate headings for Benefits, Pay, Schedule if present. We'll include them.
We need to remove boilerplate: EEO statements, equal opportunity, scam warning, etc. Also remove "About Us" maybe? It's substantive? It describes culture, but maybe we can keep as "About Us" section? The instruction says use headings for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. It didn't list About Us or About The Team as allowed headings. But we can still include them? The instruction says "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It gives examples but not exclusive list. Probably we should stick to those headings where applicable. The posting has sections: Responsibilities, Qualifications, About Us, About The Team. We could map About Us to "About the role"? Not exactly. Maybe we can treat "About Us" as "About the role"? But that seems odd. Better to include headings for the substantive sections we have: Responsibilities, Qualifications, Benefits, Pay, Schedule. Also maybe "About the team" could be considered "About the role"? Not sure.
The instruction: "Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It suggests those are typical headings. It doesn't forbid other headings, but we should follow the pattern. The posting includes "About Us" and "About The Team". Could we combine them into a single "About the role" section? The "About the role" heading would be appropriate for describing the role and team. The posting includes "Role Description" earlier. We could use "About the role" to encompass Role Description, Business Unit/Role Specific Information, About Us, About The Team. That would be substantive.
Thus we will produce:
About the role
with paragraphs describing mission, business unit, role description, etc.
Then Responsibilities
with - list.
Then
Qualifications
with maybe split into Minimum and Preferred? Could keep as two subsections? But we should not create extra headings unless needed. Could just list all qualifications in - . But we need to preserve all info. Could separate Minimum and Preferred as
with maybe Minimum Qualifications inside? But that's not a heading. Could just include paragraphs.
Then Benefits
with list of benefits: Competitive base salaries, Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex, Free access to global on-site wellness centers, Free and confidential counselling support through Healthy Minds program, Career development and training opportunities.
Then Pay
with paragraph: Competitive base salaries (maybe mention that pay considered based on location, experience, etc). But we already listed competitive base salaries under Benefits. Might duplicate. Better to put Pay section with statement about competitive base salaries and that final pay depends on location, experience, etc. Benefits section can list other benefits.
Then Schedule
with paragraph: Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex.
We need to ensure we don't create sections with placeholder text. All content is substantive.
We must remove boilerplate: EEO statements, equal opportunity, scam warning, etc. Also remove "US Job Seekers - Click to view the “ Know Your Rights ” poster." etc. Also remove "For a full list of Team Amex benefits, visit out Colleague Benefits Site ." (typo). Also remove "American Express is an equal opportunity employer..." etc.
Also remove "Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions." That's substantive? It's a requirement about eligibility. Could be part of Qualifications? Might be considered a requirement. We could include it under Qualifications as a note. But it's not a qualification per se, but it's a requirement. Could be included in Qualifications list.
We need to preserve all substantive information. So we should keep that eligibility statement.
Now craft HTML.
We'll start with About the role
then paragraphs.
Content for About the role: combine mission, business unit, role description.
From posting:
Job Description At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security.
Business Unit/Role Specific Information The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.
Role Description At American Express, we empower future technologists to learn, innovate, and make an impact from day one. As a Cybersecurity Intern in Enterprise Technology Services, you’ll join a 10-week Summer Internship Program and contribute to work that helps protect American Express information systems, customer data, colleague experiences, and digital assets. Cybersecurity teams help identify, reduce, monitor, and respond to technology and information security risks. In this role, you may support cybersecurity operations, secure architecture, identity and access management, endpoint protection, security monitoring, application security, documentation, and AI-enabled cybersecurity workflows with guidance from peers and leaders. You’ll collaborate with cybersecurity teams, product partners, software development teams, operations teams, and business stakeholders to learn how security controls, secure development practices, and threat detection capabilities are designed, implemented, documented, and continuously improved.
About Us At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
About The Team We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally: Competitive base salariesFlexible work arrangements and schedules with hybrid and virtual options with Amex FlexFree access to global on-site wellness centers staffed with nurses and doctors (depending on location)Free and confidential counselling support through our Healthy Minds programCareer development and training opportunities For a full list of Team Amex benefits, visit out Colleague Benefits Site .
We'll need to format that into paragraphs, maybe split.
Now Responsibilities: list each bullet.
Responsibilities bullet points:
- Supports in monitoring security systems and events using a variety of tools, alerts, and logs to identify potential threats and vulnerabilities, ensuring timely detection and prevention of security or operational issues
- Triages and investigates security or operational issues to determine root causes, impacts, and potential mitigation strategies, helping to prevent future incidents and minimize damage
- Support secure network, endpoint, identity, and access management activities with guidance from peers and leaders.
- Assist with security documentation, assessment findings, remediation tracking, and reporting to support compliance and security posture improvements.
- Collaborate with software development and product teams to learn how security is integrated into the software development lifecycle and secure coding practices.
- Conduct research on emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making.
- Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation.
- Assist with security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services under guidance.
- Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements.
We need to ensure each is
- .
Qualifications: Minimum Qualifications and Preferred Qualifications.
Minimum:
- Must have earned a Master's degree in Cybersecurity, Computer Science, Information Systems, Computer Engineering, Engineering, or another technical field before the full-time start date.
- Students must have a graduation date between December 2027 and June 2028.
- Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts.
- Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts.
- Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies.
- Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment.
Preferred:
- Coursework, projects, internships, labs, competitions, research,
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It suggests those are typical headings. It doesn't forbid other headings, but we should follow the pattern. The posting includes "About Us" and "About The Team". Could we combine them into a single "About the role" section? The "About the role" heading would be appropriate for describing the role and team. The posting includes "Role Description" earlier. We could use "About the role" to encompass Role Description, Business Unit/Role Specific Information, About Us, About The Team. That would be substantive.
Thus we will produce:
About the role
with paragraphs describing mission, business unit, role description, etc.
Then Responsibilities
with - list.
Then
Qualifications
with maybe split into Minimum and Preferred? Could keep as two subsections? But we should not create extra headings unless needed. Could just list all qualifications in - . But we need to preserve all info. Could separate Minimum and Preferred as
with maybe Minimum Qualifications inside? But that's not a heading. Could just include paragraphs.
Then Benefits
with list of benefits: Competitive base salaries, Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex, Free access to global on-site wellness centers, Free and confidential counselling support through Healthy Minds program, Career development and training opportunities.
Then Pay
with paragraph: Competitive base salaries (maybe mention that pay considered based on location, experience, etc). But we already listed competitive base salaries under Benefits. Might duplicate. Better to put Pay section with statement about competitive base salaries and that final pay depends on location, experience, etc. Benefits section can list other benefits.
Then Schedule
with paragraph: Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex.
We need to ensure we don't create sections with placeholder text. All content is substantive.
We must remove boilerplate: EEO statements, equal opportunity, scam warning, etc. Also remove "US Job Seekers - Click to view the “ Know Your Rights ” poster." etc. Also remove "For a full list of Team Amex benefits, visit out Colleague Benefits Site ." (typo). Also remove "American Express is an equal opportunity employer..." etc.
Also remove "Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions." That's substantive? It's a requirement about eligibility. Could be part of Qualifications? Might be considered a requirement. We could include it under Qualifications as a note. But it's not a qualification per se, but it's a requirement. Could be included in Qualifications list.
We need to preserve all substantive information. So we should keep that eligibility statement.
Now craft HTML.
We'll start with About the role
then paragraphs.
Content for About the role: combine mission, business unit, role description.
From posting:
Job Description At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security.
Business Unit/Role Specific Information The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.
Role Description At American Express, we empower future technologists to learn, innovate, and make an impact from day one. As a Cybersecurity Intern in Enterprise Technology Services, you’ll join a 10-week Summer Internship Program and contribute to work that helps protect American Express information systems, customer data, colleague experiences, and digital assets. Cybersecurity teams help identify, reduce, monitor, and respond to technology and information security risks. In this role, you may support cybersecurity operations, secure architecture, identity and access management, endpoint protection, security monitoring, application security, documentation, and AI-enabled cybersecurity workflows with guidance from peers and leaders. You’ll collaborate with cybersecurity teams, product partners, software development teams, operations teams, and business stakeholders to learn how security controls, secure development practices, and threat detection capabilities are designed, implemented, documented, and continuously improved.
About Us At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
About The Team We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally: Competitive base salariesFlexible work arrangements and schedules with hybrid and virtual options with Amex FlexFree access to global on-site wellness centers staffed with nurses and doctors (depending on location)Free and confidential counselling support through our Healthy Minds programCareer development and training opportunities For a full list of Team Amex benefits, visit out Colleague Benefits Site .
We'll need to format that into paragraphs, maybe split.
Now Responsibilities: list each bullet.
Responsibilities bullet points:
- Supports in monitoring security systems and events using a variety of tools, alerts, and logs to identify potential threats and vulnerabilities, ensuring timely detection and prevention of security or operational issues
- Triages and investigates security or operational issues to determine root causes, impacts, and potential mitigation strategies, helping to prevent future incidents and minimize damage
- Support secure network, endpoint, identity, and access management activities with guidance from peers and leaders.
- Assist with security documentation, assessment findings, remediation tracking, and reporting to support compliance and security posture improvements.
- Collaborate with software development and product teams to learn how security is integrated into the software development lifecycle and secure coding practices.
- Conduct research on emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making.
- Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation.
- Assist with security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services under guidance.
- Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements.
We need to ensure each is
- .
Qualifications: Minimum Qualifications and Preferred Qualifications.
Minimum:
- Must have earned a Master's degree in Cybersecurity, Computer Science, Information Systems, Computer Engineering, Engineering, or another technical field before the full-time start date.
- Students must have a graduation date between December 2027 and June 2028.
- Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts.
- Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts.
- Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies.
- Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment.
Preferred:
- Coursework, projects, internships, labs, competitions, research,
Qualifications
with maybe split into Minimum and Preferred? Could keep as two subsections? But we should not create extra headings unless needed. Could just list all qualifications in- . But we need to preserve all info. Could separate Minimum and Preferred as
- with maybe Minimum Qualifications inside? But that's not a heading. Could just include paragraphs.
Then
- . Qualifications: Minimum Qualifications and Preferred Qualifications. Minimum: - Must have earned a Master's degree in Cybersecurity, Computer Science, Information Systems, Computer Engineering, Engineering, or another technical field before the full-time start date. - Students must have a graduation date between December 2027 and June 2028. - Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts. - Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts. - Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies. - Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment. Preferred: - Coursework, projects, internships, labs, competitions, research,
Benefits
with list of benefits: Competitive base salaries, Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex, Free access to global on-site wellness centers, Free and confidential counselling support through Healthy Minds program, Career development and training opportunities. ThenPay
with paragraph: Competitive base salaries (maybe mention that pay considered based on location, experience, etc). But we already listed competitive base salaries under Benefits. Might duplicate. Better to put Pay section with statement about competitive base salaries and that final pay depends on location, experience, etc. Benefits section can list other benefits. ThenSchedule
with paragraph: Flexible work arrangements and schedules with hybrid and virtual options with Amex Flex. We need to ensure we don't create sections with placeholder text. All content is substantive. We must remove boilerplate: EEO statements, equal opportunity, scam warning, etc. Also remove "US Job Seekers - Click to view the “ Know Your Rights ” poster." etc. Also remove "For a full list of Team Amex benefits, visit out Colleague Benefits Site ." (typo). Also remove "American Express is an equal opportunity employer..." etc. Also remove "Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions." That's substantive? It's a requirement about eligibility. Could be part of Qualifications? Might be considered a requirement. We could include it under Qualifications as a note. But it's not a qualification per se, but it's a requirement. Could be included in Qualifications list. We need to preserve all substantive information. So we should keep that eligibility statement. Now craft HTML. We'll start withAbout the role
thenparagraphs. Content for About the role: combine mission, business unit, role description. From posting: Job Description At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. Business Unit/Role Specific Information The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company. Role Description At American Express, we empower future technologists to learn, innovate, and make an impact from day one. As a Cybersecurity Intern in Enterprise Technology Services, you’ll join a 10-week Summer Internship Program and contribute to work that helps protect American Express information systems, customer data, colleague experiences, and digital assets. Cybersecurity teams help identify, reduce, monitor, and respond to technology and information security risks. In this role, you may support cybersecurity operations, secure architecture, identity and access management, endpoint protection, security monitoring, application security, documentation, and AI-enabled cybersecurity workflows with guidance from peers and leaders. You’ll collaborate with cybersecurity teams, product partners, software development teams, operations teams, and business stakeholders to learn how security controls, secure development practices, and threat detection capabilities are designed, implemented, documented, and continuously improved. About Us At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express. About The Team We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally: Competitive base salariesFlexible work arrangements and schedules with hybrid and virtual options with Amex FlexFree access to global on-site wellness centers staffed with nurses and doctors (depending on location)Free and confidential counselling support through our Healthy Minds programCareer development and training opportunities For a full list of Team Amex benefits, visit out Colleague Benefits Site . We'll need to format that into paragraphs, maybe split. Now Responsibilities: list each bullet. Responsibilities bullet points: - Supports in monitoring security systems and events using a variety of tools, alerts, and logs to identify potential threats and vulnerabilities, ensuring timely detection and prevention of security or operational issues - Triages and investigates security or operational issues to determine root causes, impacts, and potential mitigation strategies, helping to prevent future incidents and minimize damage - Support secure network, endpoint, identity, and access management activities with guidance from peers and leaders. - Assist with security documentation, assessment findings, remediation tracking, and reporting to support compliance and security posture improvements. - Collaborate with software development and product teams to learn how security is integrated into the software development lifecycle and secure coding practices. - Conduct research on emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making. - Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation. - Assist with security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services under guidance. - Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements. We need to ensure each is