Description

You will lead enterprise-wide API security initiatives and serve as the subject matter expert for managing, monitoring, and reporting on API security risk reduction.

Responsibilities

• Perform ongoing governance with API owners to ensure implementation of threat-based requirements.
• Develop and maintain API security standard requirements and design patterns.
• Validate API security control implementation against vulnerability testing tool outputs to ensure auditability.
• Serve as a technical advisor to application teams and evangelize API security design principles.
• Collaborate across the organization as an API security subject matter expert.

Required Skills

• 10+ years of experience in technical security or engineering roles.
• Hands-on experience developing and securing REST, SOAP, and gRPC web APIs and applications.
• Proven experience performing security testing of web services and web APIs.
• Expertise in leading threat modeling exercises for applications and services.
• Deep understanding of API identity and access management using OAuth 2.0, OIDC, and JWT.
• Strong knowledge of cryptography controls for data at rest, in motion, and in use.
• Practical application of NIST 800-53, NIST CSF, OWASP, and SANS Top 25 frameworks.
• Experience with Java, JavaScript, and mobile application development.
• Familiarity with Oracle, SQL, and NoSQL database architectures.

Preferred Skills

• Experience mentoring teams on application security and secure development practices.
• Experience with DevOps processes in Cloud/SaaS environments (AWS, Azure, Google App Engine, or Oracle Cloud).
• Proficiency in Go or Rust.

Key Skills

Education

Any Graduate