API Security Architect

We’re looking for a API Security Architect to join a leading organization and shape how modern applications are secured at scale.

If you’re passionate about application security, API protection, and secure architecture design—this is your chance to make a real impact.

What You’ll Do

• Design and define secure architectures for web applications and APIs
• Lead threat modeling, attack surface analysis, and risk assessments
• Establish security standards and best practices for application and API development
• Work closely with R&D / Engineering teams to embed security into design and development processes
• Drive implementation of AppSec and API security controls (WAF, API Gateway, authentication, etc.)
• Support and guide DevSecOps practices and secure SDLC
• Evaluate and integrate security tools and technologies

What We’re Looking For

• Proven experience as a Security Architect / AppSec Engineer / Cyber Security Architect
• Strong knowledge of:
• Web security (OWASP Top 10, common attack vectors)
• API security (OAuth2, OpenID Connect, JWT, API gateways)
• Experience with threat modeling and secure design principles
• Hands-on understanding of:
• WAF, API protection, authentication & authorization mechanisms
• Experience working with development teams (R&D)
• Familiarity with cloud environments (AWS / Azure / GCP)
• Knowledge of DevSecOps / CI-CD security – advantage

Nice to Have

• Experience with SAST / DAST / SCA tools
• Background in microservices or cloud-native architectures
• Experience in regulated environments (finance, enterprise, etc.)