API Security Engineer

Kyndryl; Amstelveen; On-site; EUR 90,000 - 120,000; Full time

Job summary

Kyndryl is seeking an API Security Engineer to strengthen our central platform by securing APIs across customer and partner ecosystems. You will drive API security strategy, standards, and governance, translating security controls into automated platform guardrails and policies.

You will collaborate with engineers, architects, and security specialists to ensure APIs are secure, compliant, and resilient against evolving threats. Excellent communication and ownership are essential.

Qualifications

• Strong cybersecurity principles across cloud and application security.
• In-depth API security expertise with OWASP Top10, Mitre, CVE.
• Advanced authN/authZ: OAuth, JWT, session management, mTLS, attribute- and object-level controls.
• Analytical mindset to assess findings and translate into policy improvements.
• Ability to translate complex security requirements into practical platform policies and guardrails.
• Excellent communication and stakeholder management; proactive and ownership-driven.

Responsibilities

• Secure APIs and govern the API landscape to meet security requirements.
• Translate security standards into platform policies and automated guardrails.
• Collaborate with engineers, architects and security experts to ensure compliance and resilience.

Skills

API security

Cloud security

OWASP Top10

Mitre ATT&CK

CVE knowledge

OAuth

JWT

mTLS

Attribute-level authorization

Communication

Tools

Akamai Noname

Salt

Cequence

Job description

As an API Security Engineer on a central platform you will play a key role in strengthening our digital resilience by securing the APIs that power our customer and partner ecosystems.

You will join our API Security team at our client. The team drives the API security strategy, standards, and governance across the bank, ensuring that APIs are secure and comply with internal security requirements.

As an API Security Engineer, it’s your job to safeguard the security of our API landscape by translating security standards, controls, and best practices into platform policies and automation of business logic. You will work closely with engineers, architects, and security specialists to ensure APIs are secure, compliant with security requirements, and resilient against evolving threats.

Your profile

You are a security specialist who combines technical expertise with a pragmatic mindset.

You bring:

• Strong understanding of cybersecurity principles and architectures included cloud security, and application security architecture
• Deep expertise in API and application security with a strong understanding of frameworks such as OWASP top10, Mitre and CVE
• Advanced knowledge of authentication and authorization mechanisms such as Oauth, JWT, session management, mTLS, Object-level authorization and attribute-level authorization
• An analytical mindset to accurately assess the severity and criticality of API Security findings, translate these findings into improvements for policies and business rules
• The ability to translate complex security requirements into practical and actionable platform policies and automated guardrails
• Exceptional communication skills, combined with a highly proactive mindset and a proven ability to take ownership

Nice to have

• Proven experience with managing API Security products such as Akamai Noname, Salt or Cequence

Required Soft Skills

• Excellent communication and stakeholder management skills
• Excellent analytical thinking, with a practical and solution-oriented mindset. You are proactive and ready to be challenged
• You can take ownership and provide leadership in ambiguous situations, bringing structure, direction, and confidence while the direction is still taking shape.
• You can coach, guide, and mentor colleagues, helping the team grow in both technical capability and delivery maturity.