API Security Engineer

KeyCorp
United States
Workplace: RemoteFull timeUSD 116,000 - 216,000 annuallyFunction: CybersecurityEducation: bachelorsSkills: ["Troubleshooting","Collaboration","Security architecture review","Threat modeling"]

Design, deploy, integrate, administer, and optimize enterprise API and application security controls across hybrid cloud, on-premises, and containerized environments. Lead API discovery and posture management, investigate security alerts, and remediate issues with engineering teams. Build eBPF-based API visibility agents, integrate with API gateways and WAAP/WAF protections, and perform security architecture reviews and threat modeling. Automate testing and security workflows in CI/CD and DevSecOps pipelines.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
KeyCorp
KeyCorp
12 hours ago

API Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Design, deploy, integrate, administer, and optimize enterprise API and application security controls across hybrid cloud, on-premises, and containerized environments. Lead API discovery and posture management, investigate security alerts, and remediate issues with engineering teams. Build eBPF-based API visibility agents, integrate with API gateways and WAAP/WAF protections, and perform security architecture reviews and threat modeling. Automate testing and security workflows in CI/CD and DevSecOps pipelines.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Design, deploy, integrate, administer, and optimize enterprise API and application security controls across cloud, on-premises, and hybrid/containerized environments.
  • •Perform continuous API discovery, inventory, classification, and API security posture management; identify shadow/rogue/zombie/deprecated/undocumented APIs.
  • •Deploy and maintain eBPF-based API security agents/sensors, including traffic collection components and troubleshooting of installation, connectivity, permissions, kernel compatibility, and performance.
  • •Integrate API security platforms with API gateways, middleware, reverse proxies, ingress controllers, and traffic-management technologies; configure and validate traffic visibility and security policies.
  • •Conduct security architecture reviews and threat modeling (including OAuth/OIDC/JWT, IAM/RBAC, trust boundaries), and automate security testing/remediation workflows in CI/CD/DevSecOps pipelines.

Pay and Benefits

Salary: USD 116,000 - 216,000 annually

Key Requirements

  • •Bachelor’s degree in a related technical discipline with relevant professional experience, or an equivalent combination of education and cybersecurity experience.
  • •Hands-on experience with enterprise API security technologies and deploying/configuring/tuning WAF/WAAP security controls.
  • •Understanding of eBPF-based agent/sensor deployment and troubleshooting in Linux, Kubernetes, containerized, and cloud environments.
  • •Experience integrating API security platforms with enterprise API gateways and API management technologies.
  • •Strong knowledge of HTTP/HTTPS, DNS, TLS/mTLS, REST/GraphQL, OpenAPI/Swagger, and OWASP API Security Top 10 and OWASP Top 10.
Experience:CybersecurityDevSecOpsCloud securityAPI security
Education:Bachelor's in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, Software Engineering, or a related technical discipline
Skills:TroubleshootingCollaborationSecurity architecture reviewThreat modeling
Tech Stack:API securityWAF/WAAPEBPFLinuxKubernetesAPI gateway securityAPI managementAPI discoveryRESTGraphQLOWASP API Security Top 10OWASP Top 10OAuth 2.0OIDCJWTTLS/mTLSOpenAPI/SwaggerDevSecOpsCI/CDPython

Company Brief

KeyCorp
KeyCorp operates KeyBank, providing retail and commercial banking, lending, wealth management, and investment services to individuals, businesses, and institutions across the United States.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Cleveland, United States
Founded: 1849
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn