API Security Engineer

We are seeking a skilled and security-focused API Security Engineer to join our DevSecOps and Application Security team. This role will focus on securing API ecosystems across multiple environments, ensuring that all API integrations follow security best practices and meet industry compliance standards.

Key Responsibilities :

• Design, implement, and enforce security controls for public, private, and partner APIs.
• Perform API threat modeling, vulnerability assessments, and security testing (including OWASP API Top 10).
• Work closely with development and DevOps teams to integrate API security controls into CI / CD pipelines.
• Lead API security reviews and provide secure coding guidance to developers.
• Monitor API traffic and behavior to detect anomalies, abuse, or unauthorized access.
• Automate API security testing with tools such as Postman, Burp Suite, OWASP ZAP, or APIsec.
• Implement and manage API gateways and identity access mechanisms (e.g., OAut..0, OpenID Connect, JWT).
• Collaborate with architects and engineering leads to design secure, scalable API solutions.

Required Qualifications :

Preferred Qualifications :