Description

You will minimize API security risk by discovering, managing, and reporting on vulnerabilities while automating DevSecOps practices.

Responsibilities

• Automate API security assessments into CI/CD pipelines.
• Create and maintain API security specifications and review software designs for required security controls.
• Administer API security testing tools including Salt, Neo, and Data Theorem.
• Perform API code reviews and advise product development teams on technical security issues.
• Collaborate with technical teams to implement security controls that align with Information Security policies and best practices.

Required Skills

• 5+ years of experience in security engineering or automation.
• Proficiency in Python, Java, or JavaScript.
• Hands-on experience designing, developing, and testing secure APIs using REST, GraphQL, or gRPC.
• Strong Python automation skills.
• Experience implementing API specification validation within CI/CD pipelines.
• Deep understanding of SAML, OpenID, and OAuth.
• Knowledge of OWASP API Top 10, NIST Special Publications, and OSSSTM.
• Experience with API security assessment tools such as Salt Security, Neo Security, Data Theorem, Traceable, or Crunch42.
• Ability to write clean, functional code for security automation projects.

Key Skills

Education

Any Graduate