Sr Security Software Specialist - API Security Engineer

TIAA; Dallas (TX); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Superior retirement program

Health, wellness and work life balance

Comprehensive Total Rewards package

Job summary

Cybersecurity Jobs is seeking a Sr Security Software Development Engineer to lead API security engineering strategy and deliver secure enterprise solutions across applications, APIs, and cloud platforms. You will design secure architectures, mentor engineers, and drive automation using AI to strengthen cyber security practices.

The role emphasizes collaborative work across development teams, security assessments, and compliance with relevant standards while building scalable, well-architected

Qualifications

• 5+ years in software engineering or application security.
• 5+ years using Java, Python, C#, or Go with secure coding.
• 3+ years in web/API security with OAuth 2.0/OIDC and key management.
• 2+ years Agile software development.
• 2+ years cloud platform experience (AWS/Azure/Oracle/Google).
• Bachelor’s Degree or Equivalent Experience Required.

Responsibilities

• Design and implement secure architectures for applications, APIs, and cloud platforms.
• Lead security assessments using code reviews, threat modeling, and automated testing in CI/CD.
• Define security standards and educate teams on secure coding practices.
• Partner with cross-functional teams to embed security in the SDLC and ensure regulatory compliance.
• Identify opportunities to automate security with Generative AI or traditional AI.
• Improve operational efficiency by automating processes or software systems.
• Provide technical leadership and mentorship to junior engineers.

Skills

Security engineering leadership

Automation & AI for security

Mentorship & team leadership

Secure coding practices

Threat modeling

Education

Bachelor’s Degree or Equivalent Experience

Tools

OAuth 2.0

OIDC

CI/CD pipelines

AWS

Microsoft Azure

Oracle Cloud

Google Cloud Platform

React JS

Next JS

Job description

The Sr Security Software Development role focuses on API security engineering strategy and the delivery of horizontal enterprise security solutions across applications, APIs, and cloud platforms. The position involves designing secure architectures, leading security assessments, and applying automation, including AI-driven approaches, to strengthen cyber security practices.

Location and Employment Details

• Location: Dallas, TX (onsite)
• Anticipated posting end date: 2026-11-13
• Career level: 9IC

Compensation

• Base pay range: $160,000/yr - $210,000/yr

Role Summary

The Sr Security Software Development Engineer leads API Security engineering strategy to build well-architected, secure enterprise solutions. The role also includes leading a team to design secure architectures, perform security assessment work, and automate cyber security practices using AI.

Key Responsibilities

• Design and implement secure architectures for applications, APIs, and cloud platforms, including authentication mechanisms, encryption protocols, and security monitoring frameworks
• Perform security assessments using code reviews, threat modeling, and automated testing integration within CI/CD pipelines
• Define and maintain security standards, best practices, and guidelines while educating development teams on secure coding
• Partner with cross-functional teams to integrate security across the software development lifecycle and support compliance with relevant regulations
• Identify opportunities to automate and enhance cyber security practices using Generative AI or Traditional AI mechanisms
• Improve operational efficiency by automating processes or software systems
• Provide technical leadership and mentorship to junior engineers within and outside the team

Required Qualifications

• 5+ years of experience in software engineering or application security roles
• 5+ years using at least one major programming language (Java, Python, C#, or Go) with secure coding practices
• 3+ years hands‑on experience in web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management
• 2+ years experience working in Agile software development practices
• 2+ years experience with one or more cloud platforms (AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform)
• Education: Bachelor’s Degree or Equivalent Experience Required

Preferred Skills

• 3+ years of full stack development experience using React JS, Next JS, and Auth JS
• Hands‑on experience with web application and API security testing, vulnerability assessment, and remediation
• Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks such as NY-DFS
• Ability to conduct effective threat modeling and security architecture reviews for complex software systems
• 1+ years experience using open source Generative or traditional AI software solutions to automate or improve operational efficiency

Technologies

• Java, Python, C#, Go
• OAuth 2.0, OIDC
• CI/CD pipelines
• AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform
• React JS, Next JS, Auth JS

Additional Skills

• Accountability
• Adaptability
• Business Continuity Planning
• Cloud Computing Security
• Collaboration
• Communication
• Compliance
• Consultative Communication
• Cybersecurity
• Detail-Oriented
• General Risk Management
• Network Security
• Prioritizes Effectively

Benefits

• Superior retirement program
• Highly competitive health, wellness, and work life offerings
• Comprehensive Total Rewards package

Physical Requirements

• Sedentary Work