Software Engineer II
American Express4 days ago
Bengaluru, IndiaMid Level
Responsibilities
- Investigate malicious and automated activity targeting internet-facing applications, websites, and APIs, including bot attacks, credential stuffing, account takeover, scraping, fraud, and API abuse.
- Analyze application logs, WAF events, bot-management signals, API and network telemetry, authentication activity, fraud events, threat intelligence, and other security datasets.
- Develop and optimize Elasticsearch queries to correlate events, identify behavioral patterns, and support detection use cases.
- Use Python and REST APIs to collect, enrich, correlate, process, and analyze security data.
- Convert repetitive manual investigation and analysis processes into reusable, scalable automation and detection logic.
- Apply Generative AI and AI-assisted engineering tools to investigation, query generation, data analysis, code development, and automation.
- Document investigation methods, detection logic, automation workflows, and operational procedures.
- Collaborate with cybersecurity, application engineering, fraud, infrastructure, and data teams to improve detection and protection of internet-facing services.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, Data Science, or a related technical field.
- At least 5 years of software engineering, security engineering, security analytics, or related technical experience.
- Strong Python programming and automation skills.
- Strong experience with REST APIs, structured and semi-structured data, and Elasticsearch.
- Understanding of HTTP/HTTPS, REST APIs, Layer 7 protocols, web applications, and internet-facing application architectures.
- Ability to independently investigate activity, formulate hypotheses, analyze data, and distinguish legitimate behavior from malicious behavior.
- Experience converting manual analytical processes into Python-based automation and repeatable engineering solutions.
- Practical experience with Generative AI and AI-assisted development tools such as ChatGPT and GitHub Copilot or comparable technologies.
- Familiarity with Git, CI/CD, testing, code reviews, and secure development practices.
- Strong analytical, problem-solving, and communication skills.
- Preferred experience with Docker, Kubernetes, Kafka, large-scale security or application datasets, bots, application security, API security, fraud, account takeover, automated attacks, Cloudflare, Akamai WAF/Bot Manager, SIEM, security analytics, observability, or threat detection platforms.
Benefits
- Competitive base salaries and bonus incentives.
- Financial-well-being and retirement support.
- Medical, dental, vision, life insurance, and disability benefits, depending on location.
- Flexible hybrid, onsite, or virtual working arrangements depending on role and business need.
- Paid parental leave, depending on location.
- Access to onsite wellness centers and confidential counseling through the Healthy Minds program.
- Career development and training opportunities.
Tech Stack
Categories
About American Express
American Express builds a global payments network and issues consumer, small-business, and corporate cards, plus merchant acquiring and travel services. Revenue comes from card fees, interest and lending, discount/merchant fees, and network services. Founded in 1850 and headquartered in New York City, it operates the Amex acceptance network worldwide and offers co-branded cards and membership rewards across millions of cardmembers and merchants; ticker NYSE: AXP.