619/618- Security Software Engineer - API Consultant

01st August, 2024

Security Software Engineer - API Consultant

For more than three decades, Strategic Data Systems (SDS) has been a software consultancy firm specializing in strategy, technology, and business transformation for Fortune 100 companies, mid-sized firms, and startups. At SDS, we empower our development teams to address our clients' critical business challenges by leveraging cutting edge technologies. If you seek a workplace where your contributions are truly appreciated, then SDS is the company for you. Join us today to work alongside fellow development specialists and become a crucial part of our dynamic and cohesive community.

What You'll Do
Securing APIs is essential to "shifting left" the technology development at the Bank. The Individual will participate in technical conversations to determine API security risks, help establish an API runtime defense and discovery strategy leveraging relevant tooling. They will write and define API patterns while also creating the business and security requirements. They will write requirements with threat modeling in mind to assist engineers with building securely.

They will meet with stakeholders and determine criticality of controls and work with application owners to create patterns.They will collaborate with technical and business stakeholders to address Information Security risks while achieving business objectives, meeting regulatory requirements, and addressing emerging threats.

Responsible for providing expertise and support on decisions and priorities regarding the enterprise's overall Information Security strategy and posture. Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined.

Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank's risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

What you will do:

• Provides expert technical insight and industry perspective in the creation, delivery, and integration of complex and comprehensive security solutions for securing APIs.
• Acts as an internal consultant, advocate, mentor, and change agent.
• Viewed as an Information Security expert and critical technical resources across multiple technical areas and business segments.
• Partners with other groups to ensure solid, cross-functional decisions are made as a team.
• Maintains and demonstrates a strong understanding of enterprise systems, policies, standards, regulatory requirements, and business drivers.
• Represents Information Security at enterprise review meetings (ITAC, NPI Reviews, Production Readiness, etc.).
• Adheres to and promotes compliance to Information Security policies, standards and best practices.
• Leads process improvement and risk mitigation initiatives.

This position will perform the following functions:

• API Security
• API runtime engineering (Akamai, Neosec, Noname)
• Testing
• API Architecture
• API Design and Lifecycle management
• Work with other dev teams to integrate new security-focused API initatives and provide support to IT Teams through API integrations.
• Provide clear and concise documentation on delivered code as well as customer onboarding and support documentation
• Work collaboratively in an agile environment

What You'll Need

• Bachelor's degree in a relevant technology field or equivalent combination of education and work experience.
  8+ years of engineering or other IT/Security work experience relevant to the position.
  Five or more years of interdisciplinary experience in 4 or more of the following:
• Access Control Systems, Application Security, Application SDLC, Operating Systems, Cryptographic Controls, API Security, API Scanning, Experience with secure development tooling, and Networking.
• Excellent communications skills as well as the ability to build effective relationships with business leaders and stakeholders. Ability to manage multiple, diverse tasks simultaneously and effectively prioritize work; strong organizational skills in a results-oriented environment.
• Willingness to work in a highly-collaborative environment.
• Ability to effectively communicate with technical and non-technical stakeholders.
• Solid understanding of IT security best practices.
• Skilled in designing, implementing, and supporting complex technical solutions. Ability to troubleshoot complex operational issues.
• Extensive experience designing, developing, and implementing serverless solutions within AWS.
• Extensive development experience with different API capabilities.
• Experience with development/engineering of API runtime defense and scanning tools
• Experience in building and deploying CI/CD pipelines.
• Familiarity with OWASP
• Previous experience automating security controls within CI/CD pipelines a plus.
• Previous microservice development a plus.
• Previous experience in application vulnerability remediation a plus

What You'll Get

SDS, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.
Competitive base salary
Medical, dental, and vision insurance coverage
Optional life and disability insurance provided
401(k) with a company match and optional profit sharing
Paid vacation time
Paid Bench time
Training allowance offering
You'll be eligible to earn referral bonuses!