Senior Platform Engineer
Core
Operate and enhance enterprise API security capabilities, discovering, monitoring, and protecting APIs across the organization to assess security posture and coordinate threat remediation.
Role type
Senior IC API Security Platform Engineer
Builds
Enterprise API security capabilities, monitoring dashboards, and automated security workflows
Domain
Cybersecurity / API Security / Financial Services
Required skills
API security (OWASP API Top 10), HTTP protocol expertise, incident triage, OAuth 2.0/OIDC/JWT/mTLS, API security tooling (WAAP/gateways), REST/GraphQL security (via careerplan.io/jobs/REQ263678-senior-platform-engineer-at-cba)
Preferred skills
Infrastructure as Code (Terraform/CloudFormation), AWS security, CI/CD (GitHub Actions), Containers (Docker/Kubernetes), Scripting (Python/Bash/PowerShell), Observability, Penetration testing
Technologies
Akamai Noname, ServiceNow, PagerDuty, Terraform, CloudFormation, AWS, GitHub Actions, Docker, Kubernetes, Python, Bash, PowerShell
Responsibilities
Investigate API posture and runtime security alerts using HTTP traffic insights; Assess authentication, authorization, and common security risks across REST and GraphQL APIs; Validate findings, identify false positives, and prioritize risks; Work with API owners to remediate findings; Configure and improve API security policies, scanning, and integrations; Automate security workflows using APIs and scripting; Manage API security findings and vulnerabilities through incident response workflows
Seniority
Senior, hands-on IC