Description

Configure and evaluate API security while protecting ingress and egress points from malware and other threats.

Responsibilities

• Configure and evaluate API security using Cloudflare API gateway and API shield.
• Collaborate with API owners and architecture teams to design and document secure API design patterns.
• Establish and maintain operational and configuration processes for detective and preventative security policies.
• Support Cyber Security Operations Center and Threat Detection Teams with endpoint policy updates and improvements.
• Coordinate with infrastructure and application teams to deploy new policies and resolve system issues.

Required Skills

• 5-6 years of relevant experience in IT Security.
• Hands-on experience implementing API security with Cloudflare.
• Deep understanding of cryptography concepts including hashing, signing, and symmetric/asymmetric encryption.
• Experience with decryption of API traffic for security inspection, such as mTLS and TLS 1.3.
• Experience with API management platforms like MuleSoft or Apigee.
• Experience assessing and securing APIs in alignment with OWASP and other security standards.
• Knowledge of industry frameworks including MITRE ATT&CK, NIST, and CIS CSC.
• Working knowledge of networking, including routing, DNS, protocols, firewalls, and load balancing.
• Python scripting and automation experience.

Key Skills

Education

Any Graduate