Description

You will focus on minimizing API security risk by discovering, managing, and reporting on vulnerabilities through DevSecOps automation.

Responsibilities

• Automate API security assessments and integrate them into CI/CD pipelines.
• Create and maintain API security specifications and perform API code reviews.
• Review software designs to ensure required security controls are implemented.
• Administer API security testing tools including Salt, Neo, and Data Theorem.
• Advise product development teams on API-related technical issues and security controls.

Required Skills

• 5+ years of experience in security engineering or automation.
• Proficiency in Python, Java, or JavaScript for software engineering and automation.
• Hands-on experience with API security, including AuthN and AuthZ.
• Deep understanding of SAML, OpenID, and OAuth.
• Experience testing REST, GraphQL, and gRPC APIs.
• Knowledge of OWASP API Top 10, NIST Special Publications, and OSSTMM.
• Experience implementing security testing within CI/CD pipelines.
• Familiarity with security tools such as Salt Security, Neo Security, Data Theorem, Traceable, or Crunch42.

Key Skills

Education

Any Graduate