Senior API Security Architect & Governance Lead

Us Bank; Atlanta (GA); On-site; USD 127,000 - 149,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) retirement plan

Paid vacation

Job summary

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to strengthen API security enterprise-wide.

You will set standards, perform risk assessments, and lead secure API adoption across business lines and tech teams. The role requires collaboration with Information Security, Technology Risk, and Enterprise Architecture, plus hands-on security architecture for API platforms (Apigee, GraphQL, AWS API Gateway) and regulators.

Qualifications

• 10+ years of experience in Information Security, App Security, or related field.
• Deep expertise in API Security and App Security principles, frameworks, and best practices.
• Experience developing, implementing, and enforcing security standards, governance models, controls, and policies.
• Strong understanding of secure API design, authentication, authorization, and risk management.
• Experience performing threat modeling, security reviews, architecture assessments, and risk evaluations.
• Proven ability to assess and improve an organization's API security posture.
• Experience partnering with security, risk, architecture, business, and engineering stakeholders.
• Strong understanding of security frameworks, regulatory requirements, and compliance considerations.
• Hands-on technical experience with application development, APIs, or API technologies.
• Ability to influence decision-making and drive security initiatives without direct authority.

Responsibilities

• Lead the development and governance of enterprise API security standards and controls.
• Assess and improve API security posture through reviews and risk evaluations.
• Provide guidance on secure API architecture, auth, encryption, threat protection, monitoring, lifecycle.
• Collaborate with security, risk, architecture, and engineering teams to mitigate API risks.
• Conduct architecture reviews, threat modeling, and security assessments for API-enabled apps.
• Promote reusable security patterns and governance frameworks enterprise-wide.
• Influence secure-by-design API development and implementation practices.
• Support regulatory, compliance, audit, and risk management activities for API/security initiatives.
• Serve as SME for API Security and Application Security initiatives.
• Stay current on emerging API threats, threats and best practices.

Skills

API Security

Security Architecture

Security Governance

Risk Assessments

Threat Modeling

Secure-by-Design

Stakeholder Collaboration

Regulatory Compliance

Security Reviews

Application Security

Tools

Apigee

AWS API Gateway

OAuth 2.0

OIDC / JWT

Job description

U.S. Bank is seeking a Lead Information Security Consultant - API Security & Governance to strengthen API security enterprise-wide.

You will set standards, perform risk assessments, and lead secure API adoption across business lines and tech teams. The role requires collaboration with Information Security, Technology Risk, and Enterprise Architecture, plus hands-on security architecture for API platforms (Apigee, GraphQL, AWS API Gateway) and regulators.