Senior API Security Engineer – App & Gateway Defender

Wipro

Al Khobar

On-site

SAR 180,000 - 260,000

Full time

8 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Wipro is seeking a skilled API security professional to strengthen our cybersecurity capabilities focused on applications and APIs. You will secure enterprise APIs, assess vulnerabilities, and drive remediation across REST, GraphQL, gRPC, SOAP and webhooks.

The role requires hands-on experience with API Gateways (Apigee, Kong, MuleSoft, AWS API Gateway) and familiarity with SAST/DAST tools, OAuth/OIDC/SAML/JWT, and WAF/DDoS mitigation. Bachelor’s degree in CS/IT or related field is required.

Qualifications

3–5+ years in Cybersecurity with focus on Application & API Security.
Secure enterprise APIs and ensure compliance with API security standards/frameworks.
Identify API vulnerabilities and third-party security risks and drive remediation.
Experience with REST/GraphQL/gRPC/SOAP and webhooks.
Knowledge of OWASP API Security Top 10, OAuth 2.0, OIDC, SAML, JWT and JWE.
Hands-on with API Gateways like Apigee, Kong, MuleSoft, AWS API Gateway.
Experience with SAST/DAST and API testing tools (e.g., Salt Security, 4Crunch).
Understanding of WAF, TLS/SSL, rate limiting, and DDoS mitigation.
Collaborate with API/Technology teams to design and monitor security controls.

Responsibilities

Secure enterprise APIs and ensure compliance with API security standards/frameworks.
Identify API vulnerabilities, cybersecurity risks and third-party security risks, and drive remediation.
Monitor API vulnerabilities, compliance, remediation and security incidents.
Collaborate with API/Technology teams to design, implement and monitor API security controls.
Strong knowledge of REST, GraphQL, gRPC, SOAP and webhooks.
Hands-on experience securing API Gateways (Apigee, Kong, MuleSoft, AWS API Gateway).