Software Engineer – Cybersecurity Analytics & Automation (American Express) | Bengaluru/Chennai | Salary based on profile

American Express is hiring a Software Engineer II in its Enterprise Technology Services organization. This hybrid role combines software engineering, cybersecurity analytics, Python automation, Elasticsearch and Generative AI to investigate and automate detection of malicious activity affecting applications and APIs.

Job Highlights

• Company: American Express
• Role: Software Engineer II – Cybersecurity Analytics & Automation
• Locations: Bengaluru / Chennai
• Experience: 5+ years
• Work Type: Full-time
• Work Model: Hybrid
• Shift: Day
• Career Area: Technology
• Salary: Not disclosed
• Apply Before: 2 October 2026

Roles & Responsibilities

• Investigate suspicious and malicious activity targeting applications, websites and APIs.
• Analyze bot activity, credential stuffing, account takeover attempts, scraping and API abuse.
• Analyze application logs, WAF events, authentication data, fraud signals and threat intelligence.
• Develop and optimize Elasticsearch queries for security investigations.
• Use Python and REST APIs to collect, process and correlate security data.
• Convert repetitive manual investigations into scalable automation.
• Correlate signals across WAF, bot management, authentication, fraud and threat-intelligence platforms.
• Apply Generative AI to security analytics, investigation and engineering workflows.
• Use GitHub Copilot, ChatGPT or comparable AI-assisted development tools.
• Document investigation methods, detection logic and automation workflows.
• Collaborate with cybersecurity, application engineering, fraud, infrastructure and data teams.

Qualifications & Eligibility

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Data Science or related technical field.
• 5+ years of software engineering, security engineering, security analytics or related experience.
• Strong Python programming and automation skills.
• Hands-on Elasticsearch experience.
• Strong knowledge of REST APIs and structured/semi-structured data.
• Understanding of HTTP/HTTPS, Layer 7 protocols and web applications.

Required Skills

• Python
• Elasticsearch
• REST APIs
• Security analytics
• Software engineering
• Web/API security
• Data analysis
• Automation
• Git
• CI/CD

Preferred Skills

• Docker
• Kubernetes
• Kafka
• WAF and bot-management platforms
• SIEM/security analytics
• Cloud security
• Application security
• Threat detection