Senior Api Security Engineer

Description

We are seeking an experienced senior API security engineer to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.

Key responsibilities

• Design, implement, and manage API security solutions across enterprise environments
• Configure and maintain API gateways (e.g., F5, Kong, IBM DataPower)
• Implement and manage IDS/IPS systems for threat detection and prevention
• Integrate security solutions with SIEM platforms for monitoring and incident response
• Develop and enforce API security policies, including rate limiting, authentication, and threat protection
• Secure APIs by identifying and blocking malicious patterns and automated bot attacks
• Perform security assessments, vulnerability analysis, and risk mitigation
• Collaborate with cross-functional teams to ensure secure application delivery

Requirements

• Minimum 5+ years of experience in API security and network security
• Hands-on experience with:
  • F5 / Kong / IBM DataPower API gateways
  • IDS/IPS solutions
  • SIEM integration
• Strong understanding of:
  • API security best practices
  • Network security architecture
  • Threat detection and mitigation techniques
• Experience in securing APIs against common attack vectors (OWASP, bot attacks, etc.)
• Relevant security certifications are mandatory:
  • CISSP
  • GICSP
  • Or equivalent