: The API Security Engineer is responsible for securing APIs across the organization’s systems and services. This role involves identifying and mitigating vulnerabilities, monitoring API activity, and implementing security best practices to protect data and ensure safe integrations. The engineer will collaborate with development and DevOps teams to embed security into the API lifecycle and respond to emerging threats.

This role also focuses on preventing or mitigating attacks on APIs. APIs serve as the backend framework for mobile and web applications, making it critical to protect the sensitive data they transfer.

Secure RESTful and GraphQL APIs across our platforms

Perform API threat modeling and vulnerability assessments

Implement authentication, authorization, and encryption mechanisms

Monitor API traffic for abnormal behavior or breaches

Work with development teams to ensure secure coding practices