Senior API Security Engineer
Core
Hunt for business logic vulnerabilities in APIs, design authentication/authorization patterns, and harden API gateways.
Role type
Senior API Security Engineer
Builds
Secure API gateways, authentication components, and partner integration patterns
Domain
Financial services / API Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Python scripting, REST security, GraphQL security, OAuth 2.0, OpenID Connect (OIDC), API Gateway configuration, automated attack simulation
Preferred skills
Experience with API Security tools (Postman, Burp Suite, 42Crunch), Open Banking standards
Technologies
Kong, Azure API Gateway, Python, REST, GraphQL, OAuth2, OIDC, JWT, Postman, Burp Suite, 42Crunch
Responsibilities
Hunt for business logic vulnerabilities (BOLA/IDOR, Mass Assignment), Design and validate OAuth2/OIDC/JWT implementations, Script automated attacks against API Gateway, Configure API Gateway for security, Deliver security design patterns for auth/SSO/MFA/Partner integration