API SECURITY ENGINEER

ROLE: Security Engineer Specialist

LOCATION:100% REMOTE DURATION:12+ MONTHS

Must Haves: 5+ years of relevant experience in IT Security. Must have hands-on experience with Cloudflare implementing API security. Experience in decryption of API traffic for security inspection. API management experience is a must have in platforms such as; MuleSoft, Apigee, and etc. Must be able to collaborate with API teams to design and document secure API design patterns. Nice to have: One must have deep understanding of cryptography concepts

Job Description: • Provide support to the Cyber Security Operations Center and Threat Detection Teams with recommendations and handling of their requests for changes, updates and improvements of endpoint polices. • Coordinate with other infrastructure, engineering, and application project/support teams to ensure new policies/assets are deployed and issues impacting tools and systems are resolved quickly and effectively without adversely impacting the affected business systems. • Participate in on-call rotation. • Coordinate with Information Security team to ensure solution assurance and compliance to security policy, procedures, standards, and baseline security configurations. • Understand and advocate IT Security standards, reference architectures. • Demonstrate an understanding of malware, threats, vulnerabilities, and the complete affect these could have in the environment. • Communicate optimally with clients to identify needs and evaluate alternative technical solutions and strategies.

Qualifications

• 5-7 years of relevant experience in IT Security • Hands-on experience with Cloudflare implementing API security • Deep understanding of cryptography concepts: hashing, signing, symmetric/asymmetric encryption and decryption, etc. • Experience in decryption of API traffic for security inspection ex. mTLS, TLS 1.3, etc. • Experience in API management ex. MuleSoft, Apigee, etc. • Collaborate with API teams to design and document secure API design patterns. • Experience assessing and securing APIs in alignment with OWASP and other security standards. • Demonstrated knowledge of API design standards, patterns, and best practices • Familiar with industry security regulations and frameworks (MITRE Attack Framework, NIST, CIS CSC, etc.) • General understanding of key IT components – Secure LDAP, Networking, firewall, load balancing, Federated Identity. • Familiar with change management processes and activities and change review board routines. • Working knowledge of networking, (routing, DNS, common ports, protocols, and firewalls) • Needs to be organized and have the capability to multitask by working multiple problems, tasks and still seeing tasks through to closure working with all type of endpoint technologies. Must be able to work independently. • Python scripting and automation experience.

--

--

Thanks & Regards, Mohan Sai| Talent Acquisition Lead Thoughtwave Software and Solutions Mobile:630-480-4004 EXTN: 143 Text Messages:3099656527 Email: Mohan@thoughtwavesoft.com linkedin:https://www.linkedin.com/in/mohan-sai-badaru-112b581b9/