Description

You will own the implementation and maintenance of API security across systems.

This role is remote.

Responsibilities

• Implement API security measures, specifically leveraging Cloudflare.
• Conduct malware testing and vulnerability scanning on applications.
• Collaborate with API teams to design and document secure API patterns.
• Assess and secure APIs against OWASP and other established security standards.
• Manage security inspection by decrypting API traffic (e.g., mTLS, TLS 1.3).

Required Skills

• 7+ years of relevant experience in IT Security.
• Hands-on experience implementing API security using Cloudflare.
• Deep understanding of cryptography: hashing, signing, symmetric/asymmetric encryption/decryption.
• Experience in API management tools such as MuleSoft or Apigee.
• Working knowledge of networking fundamentals (routing, DNS, common ports, protocols, firewalls).
• Experience assessing APIs against OWASP and security standards.
• Familiarity with security regulations and frameworks (MITRE, NIST, CIS CSC).
• Proficiency in Python scripting and automation.
• General understanding of IT components: Secure LDAP, networking, firewalls, load balancing.

Preferred Skills

• Experience with TLS 1.3 decryption and inspection workflows.

Key Skills

Education

Any Graduate