RRemoteville

How Remoteville checks and expires listings

HealthEquity logoHealthEquity

Security Engineer (API Specialist)

Skills
Application SecurityCybersecurityData PrivacyInformation SecurityMachine Tool SelectionOWASPSecurity Controls
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Bachelor's degree in Information Systems, Cybersecurity or related field and minimum 2 years’ relevant experience
  • Experience as a professional security engineer and/or software engineer, particularly with APIs and modern software architecture
  • Experience with Azure cloud environments and API management tools like Azure APIM and Kong
  • Experience conducting security risk assessments for on-premise and cloud-based services
  • Advanced security certification (e.g., CISSP, CSSLP, CEH) or demonstrable competency
  • Agile/Scrum and Microsoft Azure experience beneficial
  • Expert-level knowledge of API Security concepts and tooling
  • Knowledge of leading information security frameworks and best practices (OWASP API Top 10, NIST Cybersecurity Framework, ISO27001/2, and CIS Top 20 Controls)
  • Ability to perform high-quality threat modeling
  • Ability to present complex security recommendations
  • Ability to research and iterate on new security metrics
  • Documentation skills for procedures related to this role
  • Excellent interpersonal skills
  • Team player capable of developing strong collaborative working relationships
  • Experience in financial services or healthcare industries is a plus
  • Familiarity with container security, application security testing tools, and infrastructure as code scanning is a plus

Nice to have

  • Agile/Scrum knowledge
  • Azure experience
  • Financial services know-how
  • Healthcare industry familiarity
  • Container security awareness
  • AppSec tools familiarity
  • IaC scanning familiarity

Day to day

  • Oversee the API security program through strategic planning and tool selection
  • Collaborate with development teams to integrate security principles in API development
  • Manage and improve policy and standards documentation relating to API security