Security Engineer - API Security and API Scanning

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Procorp Systems, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Security Engineer - API Security and API Scanning at Procorp Systems is responsible for safeguarding our API infrastructure through comprehensive security assessments, implementing preventive measures, and detecting potential vulnerabilities. This role involves developing and executing security protocols, conducting regular scanning and testing of APIs, and collaborating with cross-functional teams to ensure all security measures are effectively integrated into our systems. As a member of our security team, you will contribute to enhancing the overall security posture of the organization while addressing emerging threats in the ever-evolving digital landscape.

Job Responsibilities

• Conduct security assessments and penetration testing on APIs to identify vulnerabilities and weaknesses.
• Implement API security best practices for development and deployment processes.
• Develop and maintain automated security scanning tools for ongoing assessment of APIs.
• Collaborate with development teams to integrate security measures into the API lifecycle.
• Monitor API traffic for anomalous activity and potential security breaches.
• Create detailed reports and documentation of security findings and remediation recommendations.
• Stay current with industry trends and threats related to API security.
• Provide risk analysis and security training to development teams to instill security awareness.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in API security or a related cybersecurity role.
• Strong understanding of web services and RESTful APIs.
• Proficiency in programming languages such as Python, Java, or JavaScript.
• Experience with security scanning tools like OWASP ZAP, Burp Suite, or similar.
• Certifications like Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) are a plus.
• Familiarity with cloud security frameworks and technologies.

Technologies & Tools

The Security Engineer will utilize various technologies and tools to ensure the security of our APIs. Familiarity with tools such as API gateways, firewalls, and security information and event management (SIEM) systems will be essential. Additionally, knowledge of automation frameworks like Jenkins for continuous security integration, as well as database technologies for secure data handling, will be employed in this role. A solid understanding of cloud platforms such as AWS and Azure is also necessary.

Ideal Candidates

The ideal candidate for the Security Engineer - API Security and API Scanning position will possess a proactive mindset, a keen eye for detail, and a passion for safeguarding digital assets. They should be excellent communicators, capable of articulating complex security concepts to both technical and non-technical stakeholders. Successful candidates will exhibit strong problem-solving abilities, adaptability, and a commitment to continuous learning in the fast-paced cybersecurity environment. A collaborative spirit and the ability to work effectively within cross-functional teams will be essential for success in this role.