API Security Engineer
Core
Build a best-in-class API security program for modern financial services, protecting critical API ecosystems through secure-by-design guidance, runtime protections, automation, and data-driven governance.
Role type
Senior IC API Security Engineer
Builds
Runtime API protection controls, secure API design patterns, CI/CD automation, and security analytics dashboards
Domain
Fintech / Payments / API Security
Required skills
API security concepts (authN/authZ, OAuth2/OIDC, JWT, rate limiting, schema validation), runtime protection (API gateways, WAF/WAAP, service mesh), CI/CD automation, data analytics, DevSecOps practices
Preferred skills
Open API tooling, API testing/fuzzing, threat modeling, financial industry compliance (NIST, ISO 27001, PCI DSS, FAPI)
Technologies
Traceable, Salt Security, NoName, API gateways, WAF/WAAP, service mesh, ingress controllers
Responsibilities
Implement and tune runtime controls across API gateways and service mesh; Partner with engineering to define secure API patterns; Build automation embedding security into CI/CD; Develop dashboards using API telemetry; Define governance for API inventories and standards; Integrate security requirements into DevSecOps lifecycle
Seniority
Senior, hands-on IC