Senior API Security Engineer

KeyBank; United States; On-site; USD 116,000 - 216,000; Full time

Benefits offered by this job

In-office focus

Flexible options

Job summary

KeyBank is seeking an API Security Engineer to design, deploy, and optimize enterprise API security controls across cloud, on-premises, containerized, and hybrid environments.

You will partner with development, security, DevOps/SRE, cloud, and platform teams to identify risks, implement protections, automate security processes, and drive remediation, while aligning with OWASP API Top 10 and organizational standards.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, Software Engineering, or a related technical discipline and relevant professional experience.
• An equivalent combination of college education, technical training, industry certifications, and hands-on cybersecurity experience.
• Demonstrated professional experience in API security, application security, WAF/WAAP engineering, security architecture, DevSecOps, cloud security, vulnerability management, or security engineering.

Responsibilities

• Design, deploy, and optimize enterprise API security controls across cloud, on-premises, containerized, and hybrid environments.
• Partner with application development, security architecture, DevOps/SRE, cloud, network, SOC, middleware, and platform engineering teams to identify security risks and drive remediation.
• Integrate API security findings with SIEM, SOAR, vulnerability management, incident response, and ticketing workflows.
• Design, deploy, configure, and maintain eBPF-based API security agents and sensors across Linux, Kubernetes, and cloud environments.

Skills

API Security

WAF/WAAP

eBPF

Linux

Kubernetes

API Gateway Security

CI/CD

Python

Threat Modeling

Security Architecture

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Equivalent combination of education and experience

Job description

KeyBank is seeking an API Security Engineer to design, deploy, and optimize enterprise API security controls across cloud, on-premises, containerized, and hybrid environments.

You will partner with development, security, DevOps/SRE, cloud, and platform teams to identify risks, implement protections, automate security processes, and drive remediation, while aligning with OWASP API Top 10 and organizational standards.