Security and API Test Specialist

Jobtailor; Winnipeg; On-site; CAD 90,000 - 120,000; Full time

Job summary

Jobtailor in Winnipeg, Canada, is seeking an experienced API and security tester to design, execute, and maintain API and security test plans. You will validate APIs, data flows, interfaces, and end-to-end processes, ensuring authentication and encryption controls are solid.

Collaboration with developers and cybersecurity teams is essential for governance and production readiness. Responsibilities include performance testing, report/dashboard creation, and driving remediation and continuous

Qualifications

• Bachelor’s or higher in Computer Science or equivalent experience.
• 5+ years designing and executing large-scale API and security testing initiatives.
• Strong experience in API Testing, Security Testing, and Performance Testing.
• Experience with API functional, integration, and end-to-end testing.
• Experience validating authentication, authorization, encryption, and access controls.
• Experience with load, stress, and endurance testing.
• Experience with SAST, DAST, SCA, and vulnerability assessments.
• Familiarity with Azure DevOps, monitoring, and reporting tools.

Responsibilities

• Design, develop, execute, and maintain API, security, and non-functional test plans, scripts, and test suites.
• Validate APIs, integrations, data flows, interfaces, and end-to-end business processes.
• Verify authentication, authorization, encryption, and security controls.
• Perform API functional, integration, security, and performance testing.
• Produce reports, dashboards, metrics, and test evidence for governance and production-readiness decisions.
• Collaborate with developers, architects, cybersecurity, and business stakeholders.
• Support remediation efforts and continuous improvement of testing practices.

Skills

API Testing

Security Testing

Performance Testing

Troubleshooting

Documentation

IT Consulting

Education

Computer Science degree

Tools

Fortify

SonarQube

OWASP ZAP

Burp Suite

Checkmarx

Nessus

Power BI

Job description

• Design, develop, execute, and maintain API, security, and non-functional test plans, scripts, and test suites
• Validate APIs, integrations, data flows, interfaces, and end-to-end business processes
• Verify authentication, authorization, encryption, and security controls
• Perform API functional, integration, security, and performance testing
• Use approved testing, monitoring, and reporting tools
• Conduct SAST, DAST, SCA, vulnerability assessments, penetration testing, and API security testing
• Analyze results and identify defects, vulnerabilities, bottlenecks, and root causes
• Support remediation efforts
• Collaborate with developers, architects, infrastructure, cybersecurity, and business stakeholders
• Produce reports, dashboards, metrics, and test evidence for governance and production-readiness decisions
• Support monitoring, troubleshooting, risk assessment, continuous improvement, mentoring, and testing best practices

Requirements

• Computer Science degree or equivalent experience
• 5+ years of proven experience designing and executing large-scale API and security testing initiatives using industry-standard tools
• Strong experience in API Testing, Security Testing, and Performance Testing
• Experience with API functional, integration, and end-to-end testing
• Experience validating authentication, authorization, encryption, and access controls
• Experience with baseline and benchmark testing
• Experience with load, stress, spike, soak/endurance, scalability, and capacity testing
• Experience with failover, recovery, and disaster recovery validation
• Experience with integration and data migration performance testing
• Experience with SAST, DAST, SCA, vulnerability assessments, and penetration testing
• Familiarity with Azure DevOps, Azure Monitor, Application Insights, Power BI, Fortify, SonarQube, Checkmarx, Burp Suite, OWASP ZAP, Snyk, Black Duck, Mend, Nessus, Nmap, or equivalent tools
• Strong troubleshooting, analytical, and root-cause analysis skills
• Ability to manage multiple priorities and deliverables
• Strong verbal and written communication/documentation skills
• Experience with IT Consulting is preferred

Core Competencies

Demonstrates expertise in API Testing, Security Testing, and Performance Testing, with a strong focus on validating authentication, authorization, and encryption controls. Proficient in using industry-standard tools for comprehensive testing and analysis, while effectively collaborating with cross-functional teams to ensure production readiness.