AI Security Engineer III - Agentic AI & Security Automation
American Express1 day ago
Bengaluru, IndiaSenior
Responsibilities
- Design, develop, and deploy AI agents using LLMs, agentic AI frameworks, RAG, tool/function calling, and workflow orchestration.
- Analyze code, repositories, dependencies, APIs, and container images to identify vulnerabilities and generate remediation recommendations and fixes.
- Automate testing, security validation, pull request creation, remediation tracking, owner notifications, and escalation workflows.
- Correlate vulnerability findings and repositories, identify duplicate or stale findings, analyze severity changes, and reconcile remediation status.
- Develop AI-powered cryptographic discovery, assurance, lifecycle monitoring, certificate management, and migration capabilities.
- Integrate AI agents with GitHub APIs, vulnerability APIs, AI Harness assessment results, vulnerability management platforms, and enterprise security tools.
- Implement human approval, least-privilege access, audit logging, input/output validation, and prompt-injection safeguards for AI agents.
- Write maintainable, reusable, scalable, and well-tested Python automation and collaborate with security, application development, DevSecOps, and infrastructure teams.
Requirements
- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Artificial Intelligence, or a related field, or equivalent practical experience.
- 2–4 years of hands-on experience in software development, automation engineering, DevSecOps, security engineering, or related technical roles.
- Strong Python skills, including API integrations, JSON processing, data manipulation, error handling, automated testing, and reusable automation components.
- Practical experience developing applications or automation with generative AI and LLMs, including prompt engineering, tool/function calling, structured outputs, and agent workflows.
- Familiarity with LangChain, LangGraph, or equivalent AI agent frameworks and orchestration technologies.
- Experience with GitHub, Git workflows, pull requests, repository automation, and CI/CD pipelines.
- Understanding of software security, vulnerability identification, secure coding, dependency management, application security vulnerabilities, and remediation workflows.
- Experience with security scanning tools, vulnerability management platforms, or CTEM concepts, including prioritization, risk scoring, tracking, and validation.
- Experience with scheduled automation, event-driven workflows, REST API integrations, and enterprise system integration.
- Understanding of code reviews, unit testing, automated security testing, deployment validation, prompt injection, sensitive-data handling, least privilege, human-in-the-loop approval, and AI output validation.
- Basic knowledge of encryption algorithms, TLS, digital certificates, cryptographic libraries, and key management.
- Strong analytical, troubleshooting, problem-solving, and cross-functional collaboration skills.
Benefits
- Competitive base salaries and bonus incentives.
- Financial well-being and retirement support.
- Medical, dental, vision, life insurance, and disability benefits, depending on location.
- Flexible hybrid, onsite, or virtual working arrangements depending on role and business need.
- Paid parental leave policies, depending on location.
- Access to global onsite wellness centers and confidential counseling through the Healthy Minds program.
- Career development and training opportunities.
Tech Stack
Categories
About American Express
American Express builds a global payments network and issues consumer, small-business, and corporate cards, plus merchant acquiring and travel services. Revenue comes from card fees, interest and lending, discount/merchant fees, and network services. Founded in 1850 and headquartered in New York City, it operates the Amex acceptance network worldwide and offers co-branded cards and membership rewards across millions of cardmembers and merchants; ticker NYSE: AXP.