Senior API Security Engineer

Truist; Raleigh (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

Disability

401k plan

Vacation days

Job summary

Truist is seeking a Senior Security Engineer to own API security testing and vulnerability management across applications and APIs in a fast-paced environment. You will perform security testing and remediation, drive risk-based strategies, and integrate security testing into CI/CD pipelines.

Requirements include 7+ years in security engineering, strong threat modeling, and hands-on experience with API technologies and security tooling.

Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Lead the enterprise vulnerability management program for automated API testing, including identification, assessment, prioritization, tracking, and remediation of security vulnerabilities.
• Performs security testing, and penetration testing tasks for assigned platforms and services, using defined methods to identify and remediate vulnerabilities.
• Develop risk-based remediation strategies and collaborate with application teams to reduce organizational security exposure
• Reviews relevant security threats, tools, and design options for assigned work, and provides input that supports technical plans and priorities for the job area.
• Perform triage and validation of security findings to reduce false positives and improve remediation effectiveness.
• Design, implement, and maintain automated API security testing capabilities within CI/CD pipelines.
• Implements and updates security baselines, guardrails, and control configurations for systems and applications within the area of responsibility, helping maintain regulatory and policy compliance.
• Shares knowledge and best practices with technical teammates, offering informal guidance and support during code reviews, design discussions, and pairing sessions.

Skills

Security engineering

Threat modeling

Penetration testing

CI/CD security

Python scripting

Education

Bachelor’s degree or equivalent

Tools

AWS

Azure

Burp Suite

OWASP API Security Top 10

Job description

Truist is seeking a Senior Security Engineer to own API security testing and vulnerability management across applications and APIs in a fast-paced environment. You will perform security testing and remediation, drive risk-based strategies, and integrate security testing into CI/CD pipelines.

Requirements include 7+ years in security engineering, strong threat modeling, and hands-on experience with API technologies and security tooling.