API Security Engineer

Location

4910 Tiedeman Road, Brooklyn OhioAPI Security Engineer

Role Overview

We are seeking an experienced API & Application Security Engineer with expertise in API security, Web Application Firewall (WAF/WAAP), application security, API gateway integrations, security architecture, and threat modeling.

This role is responsible for designing, deploying, integrating, administering, and optimizing enterprise API and application security controls across cloud, on-premises, containerized, and hybrid environments.

The engineer will partner directly with application development, security architecture, DevOps/SRE, cloud, network, SOC, middleware, and platform engineering teams to identify security risks, implement protections, investigate threats, automate security processes, and drive remediation.

Key Responsibilities

API Security

• Deploy, configure, administer, and optimize enterprise API security platforms and controls.
• Perform continuous API discovery, inventory, classification, and security posture management.
• Identify shadow, rogue, zombie, deprecated, and undocumented APIs.
• Analyze API traffic, endpoints, parameters, authentication mechanisms, sensitive-data flows, and behavioral patterns.
• Identify vulnerabilities including BOLA/IDOR, broken authentication and authorization, injection, SSRF, excessive data exposure, security misconfigurations, and business-logic abuse.
• Assess APIs against the OWASP API Security Top 10 and organizational security standards.
• Investigate API security alerts and coordinate remediation with engineering and application teams.
• Integrate API security findings with SIEM, SOAR, vulnerability management, incident response, and ticketing workflows.

eBPF Agent / Sensor Deployment

• Design, deploy, configure, and maintain eBPF-based API security agents and sensors across Linux, containerized, Kubernetes, and cloud environments.
• Deploy traffic-colle