Campus - Internship Programme - Undergraduate - Information Security Engineer - 2027 (UK - Burgess Hill)

Minimum Qualifications:

• Currently enrolled in a full-time Bachelor’s degree program
• Candidates with an expected graduation date in 2028
• Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts.
• Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts.
• Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies.
• Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment.

Preferred Qualifications:

• Coursework, projects, internships, labs, competitions, research, or extracurricular experience in cybersecurity, information security, software development, cloud, data, networking, or technology risk.
• Awareness of security standards, regulatory compliance, data privacy, data protection, security governance, and risk management concepts.
• Familiarity with security monitoring, threat detection, vulnerability management, incident response, endpoint protection, network security, or identity and access management concepts.
• Exposure to security tools, platforms, or operational processes used to investigate alerts, analyze threats, document findings, or support remediation activities.
• Interest in application security, secure coding, DevSecOps, cloud security, IAM, data security, network security, or AI-enabled application security.
• Awareness of AI-enabled cybersecurity capabilities and emerging risks such as prompt injection, model misuse, data exposure, AI-assisted security operations, and automation-enabled analysis.
• Interest in cybersecurity certifications or continued learning; certifications are not required for intern-level consideration.
• Strong problem solving, curiosity, ownership, professionalism, ethical judgment, and comfort learning new technologies in a fast-paced environment.

Employment eligibility to work with American Express in the United Kingdom is required as the company will not pursue visa sponsorship for these positions.

What type of work can you expect? How will you make an impact in this role?

• Support secure network, endpoint, identity, and access management activities with guidance from peers and leaders.
• Assist with security documentation, assessment findings, remediation tracking, and reporting to support compliance and security posture improvements.
• Collaborate with software development and product teams to learn how security is integrated into the software development lifecycle and secure coding practices.
• Conduct research on emerging cyber threats, security technologies, AI-enabled security risks, and control approaches to support team knowledge and decision-making.
• Use AI-enabled cybersecurity tools to support threat detection, alert triage, analysis, documentation, and investigation activities while validating outputs before escalation or implementation.
• Assist with security control implementation and monitoring approaches for cloud-based, AI-enabled, or enterprise technology services under guidance.
• Apply structured prompt design techniques when using AI agent-enabled security tools, including clear context, objectives, constraints, and security requirements.

Minimum Qualifications:

• Currently enrolled in a full-time Bachelor's degree program
• Candidates with an expected graduation date in 2028
• Foundational understanding of cybersecurity, information security, application security, network security, cloud security, or technology risk concepts.
• Foundational knowledge of network protocols, security fundamentals, identity and access management, data privacy, data protection, or secure software development concepts.
• Interest in scripting or automation using languages such as Python, Bash, PowerShell, or similar technologies.
• Strong communication, collaboration, analytical thinking, discretion, attention to detail, and learning agility with the ability to work effectively in a team environment.

Preferred Qualifications:

• Coursework, projects, internships, labs, competitions, research, or extracurricular experience in cybersecurity, information security, software development, cloud, data, networking, or technology risk.
• Awareness of security standards, regulatory compliance, data privacy, data protection, security governance, and risk management concepts.
• Familiarity with security monitoring, threat detection, vulnerability management, incident response, endpoint protection, network security, or identity and access management concepts.
• Exposure to security tools, platforms, or operational processes used to investigate alerts, analyze threats, document findings, or support remediation activities.
• Interest in application security, secure coding, DevSecOps, cloud security, IAM, data security, network security, or AI-enabled application security.
• Awareness of AI-enabled cybersecurity capabilities and emerging risks such as prompt injection, model misuse, data exposure, AI-assisted security operations, and automation-enabled analysis.
• Interest in cybersecurity certifications or continued learning; certifications are not required for intern-level consideration.
• Strong problem solving, curiosity, ownership, professionalism, ethical judgment, and comfort learning new technologies in a fast-paced environment.

Employment eligibility to work with American Express in the United Kingdom is required as the company will not pursue visa sponsorship for these positions.