Lead API Security Engineer — Enterprise Vulnerability Mastery

Truist; Charlotte (NC); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental and Vision

401(k) plan

Paid time off

Job summary

Truist in Charlotte, Raleigh, or Atlanta is seeking a Senior Security Engineer focused on API security testing and vulnerability management. You will lead security testing across applications and APIs, implement remediation strategies, and drive secure design choices within CI/CD pipelines, collaborating with DevSecOps and development teams.

The role requires deep knowledge of security testing, threat modeling, and experience with tools like Akamai, Salt Security, ReadyAPI, and Burp Suite.

Qualifications

• Bachelor's degree or equivalent education, training, and work experience.
• 7+ years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Lead the enterprise vulnerability management program for automated API testing, including identification, assessment, prioritization, tracking, and remediation of security vulnerabilities.
• Performs security testing, and penetration testing tasks for assigned platforms and services, using defined methods to identify and remediate vulnerabilities.
• Develop risk-based remediation strategies and collaborate with application teams to reduce organizational security exposure.
• Reviews relevant security threats, tools, and design options for assigned work, and provides input that supports technical plans and priorities for the job area.
• Perform triage and validation of security findings to reduce false positives and improve remediation effectiveness.
• Design, implement, and maintain automated API security testing capabilities within CI/CD pipelines.
• Implements and updates security baselines, guardrails, and control configurations for systems and applications within the area of responsibility, helping maintain regulatory and policy compliance.
• Shares knowledge and best practices with technical teammates, offering informal guidance and support during code reviews, design discussions, and pairing sessions.
• Plans and manages own work to meet defined objectives and milestones, seeking feedback, pursuing self-development, and adjusting approaches to improve quality and effectiveness over time.

Skills

API security

Vulnerability management

Penetration testing

CI/CD security

Threat modeling

Security engineering

Education

Bachelor's degree or equivalent

Tools

Akamai

Salt Security

ReadyAPI

OWASP ZAP (API)

Burp Suite

Traceable

Job description

Truist in Charlotte, Raleigh, or Atlanta is seeking a Senior Security Engineer focused on API security testing and vulnerability management. You will lead security testing across applications and APIs, implement remediation strategies, and drive secure design choices within CI/CD pipelines, collaborating with DevSecOps and development teams.

The role requires deep knowledge of security testing, threat modeling, and experience with tools like Akamai, Salt Security, ReadyAPI, and Burp Suite.