Description

You will lead enterprise-wide API security initiatives, bridging technical implementation with project governance. You own the oversight of API security across multiple teams and serve as the subject matter expert.

Responsibilities

• Develop and update API security requirements and design patterns.
• Verify that API security controls are effectively implemented through rigorous testing.
• Advocate for API security design principles to reduce organizational risk.
• Lead threat modeling and manage application security risks.

Required Skills

• 5+ years developing and securing web APIs (REST, SOAP, gRPC).
• Deep understanding of identity and access management (OAuth 2.0, OIDC, JWT).
• Proficiency in security testing for web services and APIs.
• Expertise in cryptography controls and secure data practices.
• Familiarity with NIST 800-53, NIST CSF, OWASP, and SANS Top 25.
• Experience with Java and JavaScript programming languages.
• Knowledge of mobile application development and database architectures (Oracle, SQL, NoSQL).
• Professional certification (GIAC, CISSP, or CISM).

Preferred Skills

• Experience mentoring teams on application security and secure development practices.
• Knowledge of DevOps processes in Cloud/SaaS environments (AWS, Google Cloud, Azure, Oracle Cloud).

Key Skills

Education

Any Graduate