API Cyber Security Specialist

Experience: 3–5+ years in Cybersecurity, with strong focus on Application Security and API Security. Key Responsibilities & Skills: • Secure enterprise APIs and ensure compliance with API security standards/frameworks. • Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation. • Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks. • Expertise in OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE. • Hands-on experience securing API Gateways, such as Apigee, Kong, MuleSoft or AWS API Gateway. • Experience with SAST, DAST and API security testing tools such as Noname, Salt Security or 4Crunch. • Good understanding of WAF, TLS/SSL, rate limiting and DDoS mitigation. • Collaborate with API/Technology teams to design, implement and monitor API security controls. • Monitor API vulnerabilities, compliance, remediation and security incidents. Qualification: Bachelor’s degree in Computer Science, Cyber Security, IT or related field. Preferred Certifications: CISSP / CEH / CCSP / DevSecOps certifications.

Bachelor’s degree in Computer Science, Cyber Security, IT or related field. Preferred Certifications: CISSP / CEH / CCSP / DevSecOps certifications.

Secure enterprise APIs and ensure compliance with API security standards/frameworks. Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation. Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks. Expertise in OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE. Hands-on experience securing API Gateways, such as Apigee, Kong, MuleSoft or AWS API Gateway. Experience with SAST, DAST and API security testing tools such as Noname, Salt Security or 4Crunch. Good understanding of WAF, TLS/SSL, rate limiting and DDoS mitigation. Collaborate with API/Technology teams to design, implement and monitor API security controls. Monitor API vulnerabilities, compliance, remediation and security incidents.