Senior API Security Engineer - Lead Vulnerability & CI/CD

Truist; Atlanta (GA); On-site; USD 120,000 - 170,000; Full time

Job summary

Truist is seeking a Senior Security Engineer to lead API security and vulnerability management across our in-house platforms. The role requires coordinating with DevSecOps and development teams to identify, assess, and remediate security risks in APIs and applications.

The ideal candidate will have extensive experience in security testing, threat modeling, and implementing automated testing within CI/CD environments, including familiarity with Akamai, Salt Security, and ReadyAPI tools.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 7 years of experience in security engineering or related cybersecurity roles.
• Deep specialized knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Deep knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Lead the enterprise vulnerability management program for automated API testing, including identification, assessment, prioritization, tracking, and remediation of security vulnerabilities.
• Performs security testing, and penetration testing tasks for assigned platforms and services, using defined methods to identify and remediate vulnerabilities.
• Develop risk-based remediation strategies and collaborate with application teams to reduce organizational security exposure.
• Reviews relevant security threats, tools, and design options for assigned work, and provide input that supports technical plans and priorities.
• Perform triage and validation of security findings to reduce false positives and improve remediation effectiveness.
• Design, implement, and maintain automated API security testing capabilities within CI/CD pipelines.

Skills

API security

Vulnerability management

Penetration testing

CI/CD security

Threat modeling

Security testing

Education

Bachelor's degree or equivalent

Tools

Akamai

Salt Security

ReadyAPI

Burp Suite

OWASP ZAP

Job description

Truist is seeking a Senior Security Engineer to lead API security and vulnerability management across our in-house platforms. The role requires coordinating with DevSecOps and development teams to identify, assess, and remediate security risks in APIs and applications.

The ideal candidate will have extensive experience in security testing, threat modeling, and implementing automated testing within CI/CD environments, including familiarity with Akamai, Salt Security, and ReadyAPI tools.