API Security Engineer

Fiserv
Georgia, Columbus, New Jersey
Workplace: OnsiteFull timeUSD 109,000 - 182,400 annuallyFunction: CybersecurityExperience: 5+ yearsEducation: mastersSkills: ["Communication","Pragmatic decision-making","Collaboration","Influence engineering outcomes","Follow-through"]

Design and build a best-in-class API security program for modern financial services. Implement runtime protections across API gateways, service mesh, and edge layers, and provide secure-by-design guidance aligned to OWASP API Security Top 10. Automate API security in CI/CD using policy-as-code, spec-driven checks, and testing, then turn API telemetry into dashboards and prioritized actions. Support governance, DevSecOps lifecycle integration, and audit-ready evidence while continuously improving detection and prevention.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Fiserv
Fiserv
1 day ago

API Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Design and build a best-in-class API security program for modern financial services. Implement runtime protections across API gateways, service mesh, and edge layers, and provide secure-by-design guidance aligned to OWASP API Security Top 10. Automate API security in CI/CD using policy-as-code, spec-driven checks, and testing, then turn API telemetry into dashboards and prioritized actions. Support governance, DevSecOps lifecycle integration, and audit-ready evidence while continuously improving detection and prevention.
Location: Georgia, Columbus, New Jersey
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Implement and tune runtime API protection controls (behavioral detection, abuse prevention, bot defense, schema enforcement, mTLS/OAuth validation, rate limiting, and threat response) across gateways and edge layers.
  • •Partner with engineering teams to define secure API patterns (authentication/authorization, input validation, error handling, pagination, idempotency, versioning, least-privilege) aligned to OWASP guidance.
  • •Build automation that embeds API security into CI/CD, including policy-as-code, automated checks against OpenAPI specs, secrets scanning, and runtime-to-ticket workflows.
  • •Develop dashboards and analytics from API telemetry and security findings to measure risk, adoption, control effectiveness, and program outcomes.
  • •Define API security governance and integrate requirements into the DevSecOps lifecycle (backlog planning, threat modeling, design reviews, testing, release readiness, and incident response).

Pay and Benefits

Salary: USD 109,000 - 182,400 annually
Equity and Bonus:Equity
Perks:Annual Incentive

Key Requirements

  • •5+ years related IT and cyber protection experience.
  • •MS preferred or bachelor’s degree with equivalent work experience.
  • •Strong foundation in API security concepts including authN/authZ (OAuth2/OIDC, JWT), rate limiting, schema validation, and API abuse patterns.
  • •Practical runtime protection experience with API gateways, WAF/WAAP, service mesh, ingress controllers, or specialized API security platforms.
  • •Ability to build CI/CD automation (policy-as-code, automated checks, secrets scanning, SAST/DAST/API testing) using data/telemetry to prioritize actions.
Experience:5+ yearsFintechPaymentsDevSecOps
Education:Master's
Skills:CommunicationPragmatic decision-makingCollaborationInfluence engineering outcomesFollow-through
Certifications:CISSP
Tech Stack:API securityOWASP API Security Top 10OpenAPIJSON SchemaOAuth2OIDCJWTMTLSAPI gatewaysService meshWAFWAAPIngress controllersCI/CDPolicy-as-codeSASTDASTOpenAPI toolingOpenAPI specSecrets scanning

Company Brief

Fiserv
Provides payments, processing services, risk management, and core banking technology to financial institutions, merchants, and businesses worldwide, enabling digital payments, account processing, and financial services integration.
Industry: Fintech Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Brookfield, United States
Founded: 1984
WebsiteLinkedIn