Experience: 3–5+ years in Cybersecurity, with strong focus on Application Security and API Security.
Key Responsibilities & Skills:
- Secure enterprise APIs and ensure compliance with API security standards/frameworks.
- Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation.
- Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks.
- Expertise in OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE.
- Hands-on experience securing API Gateways, such as Apigee, Kong, MuleSoft or AWS API Gateway.
- Experience with SAST, DAST and API security testing tools such as Noname, Salt Security or 4Crunch.
- Good understanding of WAF, TLS/SSL, rate limiting and DDoS mitigation.
- Collaborate with API/Technology teams to design, implement and monitor API security controls.
- Monitor API vulnerabilities, compliance, remediation and security incidents.
Qualification: Bachelor’s degree in Computer Science, Cyber Security, IT or related field.
Preferred Certifications: CISSP / CEH / CCSP / DevSecOps certifications.