FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Software Engineer II
American Express. Investigate suspicious and malicious activity targeting internet-facing applications, websites, and APIs, especially automated bot activity and Layer 7 attacks .
Tech Stack
Tools & technologiesCyber SecurityDockerElasticSearchKafkaKubernetesPython
About the role
Key responsibilities & impact- Investigate suspicious and malicious activity targeting internet-facing applications, websites, and APIs, especially automated bot activity and Layer 7 attacks
- Analyze malicious bots, credential stuffing, account takeover attempts, scraping, fraud patterns, API abuse, application-layer attacks, and anomalous network/application behavior
- Analyze application logs, WAF events, bot-management signals, API and network telemetry, authentication and account activity, fraud and security events, threat intelligence feeds, and external data sources
- Develop and optimize Elasticsearch queries to investigate security events, correlate signals, identify behavioral patterns, and support detection use cases
- Use Python and REST APIs to collect, enrich, correlate, process, and analyze security data from multiple systems
- Convert repetitive manual investigation and analysis activities into reusable, scalable automation
- Correlate signals across WAF, bot management, application, authentication, fraud, and threat intelligence platforms
- Work with large-scale datasets and distributed data-processing environments to identify trends and attack patterns
- Evaluate and apply Generative AI to security analytics and engineering workflows
- Use GitHub Copilot and ChatGPT to accelerate development with appropriate validation and secure engineering practices
- Document investigation methodologies, detection logic, automation workflows, and operational procedures
- Collaborate with cybersecurity, application engineering, fraud, infrastructure, and data teams to strengthen protection of internet-facing services
Requirements
What you’ll need- Bachelor's degree in Computer Science, Cybersecurity, Engineering, Data Science, or a related technical field
- 5+ years of software engineering, security engineering, security analytics, or related technical experience
- Strong programming and automation skills using Python
- Strong experience working with REST APIs and structured/semi-structured data
- Hands-on experience with Elasticsearch, including querying and analyzing large datasets
- Strong understanding of HTTP/HTTPS, REST APIs, Layer 7 protocols, web applications, and internet-facing application architectures
- Ability to independently perform detailed investigations, formulate hypotheses, analyze data, and distinguish legitimate activity from suspicious or malicious behavior
- Demonstrated ability to convert manual analytical processes into Python-based automation and repeatable engineering solutions
- Practical experience using Generative AI and AI-assisted development tools, including ChatGPT, GitHub Copilot, or comparable technologies
- Familiarity with Git, CI/CD, testing, code reviews, and secure development practices
- Strong analytical, problem-solving, and communication skills
- Background verification check required as a condition of employment
- Preferred: Experience with Docker, Kubernetes, Kafka, application logs, security telemetry, network data, API traffic, cybersecurity datasets, bots, application security, API security, fraud, account takeover, automated attacks, Cloudflare, Akamai WAF/Bot Manager, SIEM, security analytics, observability, or threat detection platforms
Benefits
Comp & perks- Competitive base salaries
- Bonus incentives
- Support for financial well-being and retirement
- Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- Generous paid parental leave policies (depending on your location)
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through the Healthy Minds program
- Career development and training opportunities