Sr Security Software Specialist - API Security Engineer

Nuveen; Dallas (TX); Hybrid; USD 160,000 - 210,000; Full time

Job summary

Nuveen is seeking a Sr Security Software Specialist - API Security Engineer for a Hybrid role in Dallas, TX, with opportunities to engage in secure architecture, threat modeling, and cloud security initiatives. You will lead security-focused engineering efforts across APIs and applications, guiding teams and leveraging AI to improve defenses.

The role requires 5+ years in software security, strong knowledge of OAuth 2.0/OIDC, and hands-on cloud experience (AWS/Azure/GCP), with a focus on

Qualifications

• 5+ years of software engineering or security roles.
• 3+ years with web/API security, cryptography, OAuth/OIDC.
• 2+ years in cloud platforms (AWS/Azure/GCP).
• Experience with secure coding practices and secure architectures.

Responsibilities

• Design and implement secure architectures for applications, APIs and cloud platforms.
• Conduct security assessments via code reviews, threat modeling, and automated testing in CI/CD.
• Establish and educate teams on secure coding practices and standards.
• Collaborate across teams to integrate security in the SDLC and regulatory compliance.
• Identify opportunities to automate cyber security with AI approaches and traditional methods.

Skills

Security engineering

Secure coding

OAuth 2.0

OIDC

Cloud platforms

Full stack React

AWS

Azure

GCP

Education

Bachelor's degree

Job description

## Sr Security Software Specialist - API Security EngineerApply: Hybrid Flex: Dallas, TX, USA: Charlotte, NC, USA: Full time: Posted Today: End Date: November 13, 2026 (2 days left to apply): R261000310Sr Security Software Development Engineer leads the development strategy of the API Security engineering team which is responsible for building horizontal enterprise level security solutions. You will be responsible for defining what a well-architected enterprise solution looks like and for leading a team of engineers to build the solution. You will create workstreams and work closely with other senior engineers to deliver critical initiatives. You will identify opportunities to solve security problems in creative ways by leveraging your expertise in software development, application of AI solutions and scalable architecture.Key Responsibilities and Duties* Design and implement secure architectures for applications, APIs and cloud platforms including authentication mechanisms, encryption protocols, and security monitoring frameworks* Conduct comprehensive security assessments through code reviews, threat modeling, and automated testing integration within CI/CD pipelines* Establish and maintain security standards, best practices, and guidelines while educating development teams on secure coding practices* Collaborate with cross-functional teams to integrate security throughout the software development lifecycle and ensure compliance with relevant regulations* Identify opportunities and implement solutions to automate & enhance cyber security practices using Generative AI or Traditional AI mechanisms* Improve operational efficiency of processes or software systems through automation* Provide technical leadership & mentorship to junior engineers both within and outside the team**Educational Requirements*** Bachelor's Degree or Equivalent Experience Required**Work Experience*** 5+ Years Required; 7+ Years Preferred**Physical Requirements*** Physical Requirements: Sedentary Work**Career Level** 9IC**Required Skills:** * 5+ years of experience in software engineering or application security roles* 5+ years of experience in at least one major programming language (Java, Python, C#, Go) with secure coding practices* 3+ years of hands-on experience with web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management* 2+ years of experience working with Agile software development practices* 2+ years of experience working on one or more cloud platforms such as AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform **Preferred Skills:** * 3+ years of full stack development experience using UI frameworks such as React JS, Next JS, Auth JS* Hands-on experience with web application and API security testing, vulnerability assessment, and remediation* Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks (NY-DFS)* Ability to conduct effective threat modeling and security architecture reviews for complex software systems* 1+ years' experience using open source Generative or traditional AI software solutions to automate or improve operational efficiencRelated SkillsAccountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively**Anticipated Posting End Date:**2026-11-13Base Pay Range: $160,000/yr - $210,000/yrActual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).