Sr Security Software Specialist - API Security Engineer

TIAA • Frisco, TX

3d • $160,000 - $210,000 • Onsite

About The Position

The Sr Security Software Development Engineer leads the API Security engineering team’s development strategy for building horizontal, enterprise-level security solutions. The role defines well-architected enterprise solutions and leads engineers in building them, creating workstreams and collaborating with senior engineers to deliver critical initiatives. It identifies creative ways to address security problems using software development expertise, AI solutions, and scalable architecture.

The role designs and implements secure architectures for applications, APIs, and cloud platforms; conducts security assessments; establishes security standards and practices; and collaborates across teams to integrate security throughout the software development lifecycle and support regulatory compliance. It also uses AI or other automation to improve cybersecurity practices and operational efficiency, while providing technical leadership and mentorship to junior engineers.

Requirements

• Bachelor’s degree or equivalent experience.
• At least 5 years of experience in software engineering or application security roles.
• At least 5 years of experience with at least one major programming language (Java, Python, C#, or Go) and secure coding practices.
• At least 3 years of hands-on experience with web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management.
• At least 2 years of experience working with Agile software development practices.
• At least 2 years of experience working on one or more cloud platforms such as AWS, Microsoft Azure, Oracle Cloud, or Google Cloud Platform.

Nice To Haves

• 7 or more years of work experience is preferred.
• At least 3 years of full-stack development experience using UI frameworks such as React JS, Next JS, or Auth JS.
• Hands-on experience with web application and API security testing, vulnerability assessment, and remediation.
• Knowledge of security standards (NIST identity and security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks (NY-DFS).
• Ability to conduct effective threat modeling and security architecture reviews for complex software systems.
• At least 1 year of experience using open-source generative or traditional AI software solutions to automate or improve operational efficiency.

Responsibilities

• Design and implement secure architectures for applications, APIs, and cloud platforms, including authentication mechanisms, encryption protocols, and security monitoring frameworks.
• Conduct security assessments through code reviews, threat modeling, and automated testing integration within CI/CD pipelines.
• Establish and maintain security standards, best practices, and guidelines, and educate development teams on secure coding practices.
• Collaborate with cross-functional teams to integrate security throughout the software development lifecycle and ensure compliance with relevant regulations.
• Identify opportunities and implement solutions to automate and enhance cybersecurity practices using generative AI or traditional AI mechanisms.
• Improve operational efficiency of processes or software systems through automation.
• Provide technical leadership and mentorship to junior engineers within and outside the team.

Benefits

• Superior retirement program.
• Competitive health, wellness, and work-life offerings supporting physical, emotional, and financial well-being.
• Compensation may include participation in an incentive program linked to performance, depending on the role.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior