API Cyber Security Specialist

Wipro; Al Khobar; On-site; SAR 180,000 - 260,000; Full time

Job summary

Wipro is seeking a skilled API security professional to strengthen our cybersecurity capabilities focused on applications and APIs. You will secure enterprise APIs, assess vulnerabilities, and drive remediation across REST, GraphQL, gRPC, SOAP and webhooks.

The role requires hands-on experience with API Gateways (Apigee, Kong, MuleSoft, AWS API Gateway) and familiarity with SAST/DAST tools, OAuth/OIDC/SAML/JWT, and WAF/DDoS mitigation. Bachelor’s degree in CS/IT or related field is required.

Qualifications

• 3–5+ years in Cybersecurity with focus on Application & API Security.
• Secure enterprise APIs and ensure compliance with API security standards/frameworks.
• Identify API vulnerabilities and third-party security risks and drive remediation.
• Experience with REST/GraphQL/gRPC/SOAP and webhooks.
• Knowledge of OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE.
• Hands-on with API Gateways like Apigee, Kong, MuleSoft, AWS API Gateway.
• Experience with SAST/DAST and API testing tools (e.g., Salt Security, 4Crunch).
• Understanding of WAF, TLS/SSL, rate limiting, and DDoS mitigation.
• Collaborate with API/Technology teams to design and monitor security controls.

Responsibilities

• Secure enterprise APIs and ensure compliance with API security standards/frameworks.
• Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation.
• Monitor API vulnerabilities, compliance, remediation and security incidents.
• Collaborate with API/Technology teams to design, implement and monitor API security controls.
• Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks.
• Hands-on experience securing API Gateways (Apigee, Kong, MuleSoft, AWS API Gateway).

Skills

Application Security

API Security

API vulnerability assessment

OWASP API Security Top 10

OAuth 2.0

OIDC

SAML

JWT/JWE

WAF

TLS/SSL

DDoS mitigation

Collaboration with API teams

Education

Bachelor’s degree in Computer Science/ Cyber Security/ IT

Tools

REST

GraphQL

gRPC

SOAP

Webhooks

Apigee

Kong

MuleSoft

AWS API Gateway

SAST

DAST

Salt Security

4Crunch

Job description

Experience: 3–5+ years in Cybersecurity, with strong focus on Application Security and API Security.

Key Responsibilities & Skills:

• Secure enterprise APIs and ensure compliance with API security standards/frameworks.
• Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation.
• Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks.
• Expertise in OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE.
• Hands-on experience securing API Gateways, such as Apigee, Kong, MuleSoft or AWS API Gateway.
• Experience with SAST, DAST and API security testing tools such as Noname, Salt Security or 4Crunch.
• Good understanding of WAF, TLS/SSL, rate limiting and DDoS mitigation.
• Collaborate with API/Technology teams to design, implement and monitor API security controls.
• Monitor API vulnerabilities, compliance, remediation and security incidents.

Qualification: Bachelor’s degree in Computer Science, Cyber Security, IT or related field.

Preferred Certifications: CISSP / CEH / CCSP / DevSecOps certifications.