Manager, API Security

Job Description

Job Responsibilities

Provide guidance and recommendations to other teams to improve the security of Applications, and APIs.

Demonstrate deep understanding of computer networks, operating systems, databases, web applications, and APIs .

Develop, implement and maintain Application security and API security strategy.

Develop API Security guidelines, help establish API security systems that discover, catalog and scan APIs.

Assist project team, key stakeholders, and management to prioritize business requirements and develop and maintain detailed project plans using standard tools .

Help determine resource roles needed and work with management to secure project team members .

Effectively assist in leading by influence and work in a matrix/cross functional (BU Champions) .

Assist in establishing and coordinating the project plan for migration of the project into production .

Assist with developing and defining new and improved workflow and initiatives .

Help provide training and training materials for new processes .

Work with key stakeholders to define and document communication plan .

Assist management with special assignments, such as evaluating vendors, gathering/evaluating consultant proposals, or other responsibilitiesa requested .

Provide clear communication on the issue to developers and verify the efficacy of the fix .

Provide actionable remediation feedback for findings and/or long-term risk mitigation guidance.

Collaborate with key stakeholders to understand team needs and dependencies to better align business processes .

Assist in developing and executing a methodology to evaluate, prioritize and monitor the success of the business processes .

Accurately and clearly articulate strategic issues and provide relevant, logical options for solving them.

Work closely with cross-functional teams including software engineers, and DevOps engineers to integrate security into the software development lifecycle.

Help leadership in c reat ing comprehensive and meaningful strategy and roadmap presentations .

Ability to build a framework and drive development through dynamic business intelligence tools and dashboards for use in ongoing business planning and goal measurement through KPIs.

Support and maintain tools /capabilities used for API security and Application security.

Develop and mentor other security engineers.

Must be based in the WBDs office, minimum three days/week .

Qualifications & Experiences

A bachelors degree in engineering, computer science, cybersecurity, or other related fields, from an accredited university or an equivalent professional experience may suffice in lieu of a bachelors degree.

7 or moreyears of experience with

3 or moreyears of management experience.

Experience building and evaluating system-level technical design .

Experience working directly with engineering teams

Experience with any combination of the following API security or implementation, software development, mobile security, threat modeling experience, secure coding, identity management and authentication .

Experience with multiple programming languages is a definite plus (such as, Java, Python, Javascript , Go , etc.) .

Prior hands-on experience in developing and publishing APIs.

Subject matter expertise in Application Security, and API S ecurity .

Experience implementing and/or driving security solutions at the business level .

Experience managing stakeholders at the VP level and excellent written and verbal communication skills.

Experience with s ecure software development lifecycle, distributed systems and security protocols.

Experience in c reat ing custom tools , and scripts to automate testing and make security testing process more efficient.

Preferred Qualifications

Exposure to popular application and A PI security standards including OWASP ASVS, OWASP Top 10, and OWASP API Security Top 10.

Strong understanding of A PI patterns and frameworks .

Experience with security tools and techniques , including secure coding practices, encryption, and access controls.

---