API Security Engineer

Job Summary

STAFFXPERT LLC is seeking an experienced Lead API Vulnerability Data Engineer on behalf of our client. This role is ideal for a cybersecurity professional with expertise in API security, vulnerability management, automation, and data engineering.

Key Responsibilities

• Lead the end-to-end lifecycle of API vulnerability management, including identification, assessment, remediation, and reporting.
• Partner with engineering, security, and business teams to drive timely vulnerability remediation efforts.
• Implement, configure, and maintain API security tools and supporting integrations.
• Develop automation solutions for vulnerability tracking, reporting, and operational efficiency using Python and JavaScript.
• Design and maintain security dashboards, metrics, and executive reports to provide visibility into API risk and remediation progress.
• Analyze vulnerability trends and deliver actionable insights to improve the organization's security posture.
• Collaborate with stakeholders to establish best practices for API security and vulnerability management.
• Support continuous improvement initiatives through process optimization and automation.

Required Qualifications

• 8+ years of experience in API Security, Vulnerability Management, Cybersecurity, or a related field.
• Hands-on experience with Akamai API Security or similar API security platforms.
• Strong understanding of API vulnerability management processes and remediation lifecycle.
• Proficiency in Python and JavaScript for automation and data processing.
• Experience building security dashboards, reporting solutions, and metrics.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration skills with the ability to work across technical and business teams.

Preferred Qualifications

• Experience integrating API security tools with enterprise security platforms.
• Knowledge of REST APIs, API gateways, authentication protocols, and modern web security principles.
• Experience with security automation, scripting, and data engineering best practices.
• Familiarity with enterprise vulnerability management and cybersecurity frameworks.