Job Details
- Company: American Express
- Job Position: Software Engineer II – Cybersecurity Analytics & Automation
- Location: Bengaluru, Karnataka / Chennai, Tamil Nadu
- Work Type: Hybrid
- Employment Type: Full-Time
- Experience: 5+ years
- Qualification: Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Data Science, or a related technical field
- Job Identification: 26014038
- Job Category: Technology
- Job Shift: Day
- Application Deadline: October 3, 2026
- Salary: Not specified in the job description
Job Overview
American Express is hiring a Software Engineer II for its Cybersecurity Analytics & Automation team. The role focuses on investigating automated and malicious activity targeting internet-facing applications and APIs, including bot attacks, account takeover attempts, fraud patterns, API abuse, and other unusual behavior. The engineer will analyze large-scale security and application data using Python, Elasticsearch, REST APIs, and related technologies, while converting manual investigations into scalable queries, detection logic, and automation solutions.
Key Responsibilities
- Investigate suspicious and malicious activity targeting internet-facing applications, websites, and APIs.
- Analyze automated bot activity and Layer 7 attacks.
- Identify malicious bots, credential stuffing, account takeover attempts, scraping, and fraud patterns.
- Investigate API abuse and application-layer attacks.
- Analyze application logs, WAF events, bot detection signals, API telemetry, authentication activity, fraud events, and threat intelligence data.
- Develop and optimize Elasticsearch queries for security investigations.
- Use Python and REST APIs to collect, process, enrich, and analyze security data.
- Identify repetitive manual investigation activities and convert them into scalable automation.
- Correlate signals across WAF, bot management, application, authentication, fraud, and threat intelligence platforms.
- Analyze large-scale datasets and distributed data-processing environments to identify attack patterns and trends.
- Apply Generative AI to security analytics and engineering workflows.
- Use tools such as ChatGPT and GitHub Copilot to support development, investigation, data analysis, and automation.
- Document investigation methods, detection logic, automation workflows, and operational procedures.
- Collaborate with cybersecurity, application engineering, fraud, infrastructure, and data teams.
- Contribute to improving detection capabilities and protection of internet-facing services.
Eligibility Criteria
- Candidates must have a Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Data Science, or a related technical field.
- Candidates should have 5+ years of experience in software engineering, security engineering, security analytics, or a related technical area.
- Strong programming and automation skills in Python are required.
- Candidates should have strong experience with REST APIs and structured or semi-structured data.
- Hands-on experience with Elasticsearch is required.
- Candidates should understand HTTP/HTTPS, REST APIs, Layer 7 protocols, web applications, and internet-facing application architectures.
- Candidates should be able to independently investigate security events and analyze data.
- Candidates should be able to convert manual analytical processes into Python-based automation.
- Practical experience with Generative AI and AI-assisted development tools is required.
- Familiarity with Git, CI/CD, testing, code reviews, and secure development practices is required.
Required Skills
- Python
- Elasticsearch
- REST APIs
- HTTP/HTTPS
- Layer 7 Protocols
- Web Application Security
- Security Analytics
- Data Analysis
- Automation
- Generative AI
- ChatGPT
- GitHub Copilot
- Git
- CI/CD
- Testing
- Code Reviews
- Secure Development
- Analytical Thinking
- Problem Solving
- Communication Skills
Why Join American Express?
- Opportunity to work in cybersecurity analytics and automation.
- Exposure to large-scale security and application datasets.
- Opportunity to work with Python, Elasticsearch, REST APIs, and AI-assisted engineering tools.
- Work on security challenges involving internet-facing applications and APIs.
- Collaborate with cybersecurity, fraud, application engineering, infrastructure, and data teams.
- Access to career development and training opportunities.
- Flexible working arrangements depending on the role and business requirements.
- Opportunity to work in a technology-focused environment supporting global business operations.
Important Links
Apply Link: Click here