Senior API Security Engineer (DAST/SAST, Containers)

Matlen Silver; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Matlen Silver is seeking a security engineer focused on API security to manage intake requests, risk assessments, and remediation across API, container, and application layers. You will work closely with development teams to collect detailed technical information for security reviews and to drive timely fixes.

Desired candidates have hands-on API security testing experience, proficiency with DAST/SAST tools, and familiarity with container security scanning.

Qualifications

• Hands-on experience with API security testing and vulnerability management.
• Strong knowledge of DAST and SAST tools.
• Familiarity with container security scanning tools and practices.
• Ability to coordinate across multiple development teams to drive remediation.

Responsibilities

• Manage new API security intake requests with documentation and risk assessment.
• Coordinate with development teams to gather technical details for security reviews.
• Track and ensure timely remediation and clarifications between security and development teams.
• Maintain and optimize security scanning schedules for APIs, containers, and applications.
• Perform DAST and SAST scans, analyze results, and drive remediation.
• Oversee container security assessments and ensure policy compliance.
• Document findings and communicate risks to technical and non-technical stakeholders.
• Support knowledge transfer from outgoing consultants and ensure continuity of security processes.
• Communicate security status and risk to cross-functional teams and leadership.

Skills

API security

DAST/SAST

Threat modeling

Communication

Security standards

Tools

Burp Suite

OWASP ZAP

Veracode

Checkmarx

Fortify

Docker

Kubernetes

Anchore

Trivy

Job description

Matlen Silver is seeking a security engineer focused on API security to manage intake requests, risk assessments, and remediation across API, container, and application layers. You will work closely with development teams to collect detailed technical information for security reviews and to drive timely fixes.

Desired candidates have hands-on API security testing experience, proficiency with DAST/SAST tools, and familiarity with container security scanning.