Lead API Security & Governance Architect

Usbank; Hopkins (MN); Hybrid; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Paid vacation

Job summary

U.S. Bank is hiring a Lead Information Security Consultant focused on API Security & Governance to strengthen security posture across enterprise API platforms. You will partner with Security, Risk, Architecture, and Engineering teams to define standards and drive secure API adoption.

The role emphasizes threat modeling, architecture reviews, and maintaining security controls, with a requirement for extensive experience in API and application security within a large enterprise environment.

Qualifications

• 10+ years of experience in Information Security, Application Security, API Security, Security Architecture, or a related field.

Responsibilities

• Lead the development, maintenance, and evolution of enterprise API security standards, controls, and governance practices.
• Assess and improve the bank's overall API security posture through security reviews, risk assessments, and control evaluations.
• Provide guidance on secure API architecture, authentication, authorization, encryption, threat protection, monitoring, and lifecycle management.
• Partner with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to identify and mitigate API security risks.
• Conduct architecture reviews, threat modeling exercises, and security assessments for API-enabled applications and platforms.
• Define and promote API security best practices, reusable security patterns, and governance frameworks across the enterprise.
• Influence technology teams to adopt secure-by-design API development and implementation practices.
• Support regulatory, compliance, audit, and risk management activities related to API and Application Security.
• Serve as a trusted advisor and subject matter expert for API Security and Application Security initiatives.
• Stay current on emerging API threats, vulnerabilities, technologies, and industry best practices to continuously improve enterprise security capabilities.
• Collaborate with platform teams supporting Apigee, GraphQL, AI APIs, AWS API Gateway, and other API technologies to ensure security requirements are consistently applied.
• Drive alignment between business objectives, security requirements, and enterprise technology standards.

Skills

API security

Security architecture

Threat modeling

Security reviews

Risk assessments

Regulatory compliance

Secure development

stakeholder collaboration

Communication

Security standards

Job description

U.S. Bank is hiring a Lead Information Security Consultant focused on API Security & Governance to strengthen security posture across enterprise API platforms. You will partner with Security, Risk, Architecture, and Engineering teams to define standards and drive secure API adoption.

The role emphasizes threat modeling, architecture reviews, and maintaining security controls, with a requirement for extensive experience in API and application security within a large enterprise environment.