Software Engineer II

Job d:

Location:

Bengaluru, KA, India;
Chennai, TN, India Job Function:
Engineering & Architecture

Schedule:

Full time

Shift: Day Workplace:
Hybrid Career Area:
Technology Company:
American Express Description The  Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues.

We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.

Responsibilities We are seeking an experienced Engineer (Cybersecurity Analytics & Automation) who combines strong software engineering skills with a hands-on analytical mindset. This role will focus on identifying and investigating automated and malicious activity targeting internet-facing applications and APIs, including bot attacks, account takeover attempts, fraud patterns, API abuse, and other anomalous behavior.

The ideal candidate will have a strong understanding of Layer 7 (HTTP/HTTPS) traffic and application security, along with the ability to analyze large-scale security and application datasets using Python, Elasticsearch, REST APIs, and related data-processing technologies.

This is a hands-on engineering and analytics role. The engineer will perform detailed manual investigations to understand emerging attack patterns and then translate repeatable analytical processes into scalable queries, detection logic, and Python-based automation.

The role also requires practical experience with Generative AI tools and AI-assisted engineering, including ChatGPT and Git Hub Copilot, to accelerate investigation, data analysis, automation development, and operational efficiency.

Key Responsibilities:

· Investigate suspicious and malicious activity targeting internet-facing applications, websites, and APIs, with particular focus on automated bot activity and Layer 7 attacks.
· Perform hands-on analysis to identify malicious bots, credential stuffing, account takeover attempts, scraping, fraud patterns, API abuse, application-layer attacks, and anomalous network/application behavior.
· Analyze large-scale and diverse datasets, including:

Application logs

Web Application Firewall (WAF) events

Bot management and bot detection signalsAPI and network telemetry

Authentication and account activity

Fraud and security events

Threat intelligence feeds and external data sources
· Develop and optimize Elasticsearch queries to investigate security events, correlate signals, identify behavioral patterns, and support detection use cases.
· Use Python and REST APIs to collect, enrich, correlate, process, and analyze security data from multiple systems.
· Identify repetitive manual investigation and analysis activities and convert them into reusable, scalable automation.
· Correlate signals across WAF, bot management, application, authentication, fraud, and threat intelligence platforms to distinguish legitimate users and automation from malicious activity.
· Work with large-scale datasets and distributed data-processing environments to identify trends and attack patterns that may not be visible from individual events.
· Evaluate and apply Generative AI to security analytics and engineering workflows, including investigation…