Enterprise API Security Architect

COMFORT SYSTEMS; Kentucky; On-site; USD 116,000 - 216,000; Full time

Job summary

KeyBank is seeking an experienced API Security Engineer to design, deploy, and optimize enterprise API and application security controls across cloud, on-premises, and hybrid environments.

You will partner with development, DevOps/SRE, cloud, and security teams to identify risks, implement protections, and drive remediation, including eBPF-based agents, API gateway integrations, and WAAP strategies.

Qualifications

• Experience deploying and supporting enterprise API security and WAF/WAAP engineering.
• Strong knowledge of OWASP API Top 10 and OWASP Top 10 security controls.
• Ability to perform threat modeling and security architecture reviews for APIs and applications.

Responsibilities

• Deploy, configure, and optimize enterprise API security platforms and controls.
• Design and maintain eBPF-based API security agents and sensors across Linux/Kubernetes/cloud environments.
• Integrate security platforms with API gateways, middleware, and traffic-management tools.
• Tune WAF/WAAP policies and investigate application-layer attacks with remediation in mind.
• Collaborate with development, DevOps/SRE, cloud, and security teams to remediate risks.

Skills

API Security

Application Security

WAF/WAAP

eBPF

Linux

Kubernetes

Threat Modeling

CI/CD

DevSecOps

Security Architecture

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, Software Engineering, or related field

Tools

SIEM/SOAR

OpenAPI/Swagger

Job description

KeyBank is seeking an experienced API Security Engineer to design, deploy, and optimize enterprise API and application security controls across cloud, on-premises, and hybrid environments.

You will partner with development, DevOps/SRE, cloud, and security teams to identify risks, implement protections, and drive remediation, including eBPF-based agents, API gateway integrations, and WAAP strategies.