Security Analyst and IAM
Posted 18 hours 6 minutes ago by Trust In Soda
API Security Engineer
Location: Galway, hybrid 1 week/pm onsite
Contract Type: 12 Months
Salary: Up to €375 per day
About the Team
Join a dynamic and forward-thinking API Security team dedicated to strengthening the security posture of APIs across our infrastructure. We're focused on enabling modern, scalable API security solutions and practices to protect our systems and deliver a safer digital experience for our users. As an API Security Engineer, you'll play a key role in designing, deploying, and enhancing security controls for APIs used across our platform. This hands-on role blends technical expertise, strategic thinking, and strong collaboration as you partner with cross-functional teams to deliver secure, scalable solutions.
Key Responsibilities:
- Lead the end-to-end implementation and optimization of API security solutions.
- Collaborate with development, DevOps, and security teams to integrate API security into all stages of the software development life cycle.
- Continuously monitor and enhance the API security platform's performance in line with KPIs and SLAs.
- Detect and respond to API-specific threats by leveraging runtime protection, traffic analysis, and security testing tools.
- Contribute to broader security initiatives and roadmaps focused on application and infrastructure protection.
- Automate processes and develop tooling to support testing, analysis, and reporting.
- Keep documentation updated and foster knowledge sharing across the organization.
- Stay on top of emerging API threats, vulnerabilities, and protection technologies.
- 5+ years in software engineering with a strong focus on Application or API Security.
- In-depth knowledge of API protocols and architectures (REST, SOAP, GraphQL, gRPC).
- Familiarity with API gateways, OAuth2, OIDC, JWT, and related authentication/authorization protocols.
- Solid understanding of the OWASP API Security Top 10 and secure coding practices.
- Experience with API vulnerability management and security testing tools (DAST, SAST, SCA, WAF, etc.).
- Experience with runtime security solutions, traffic monitoring, and eBPF is a plus.
- Strong engineering fundamentals and a mindset focused on secure, scalable software.
- Familiarity with agile development and DevSecOps practices.
- Analytical thinker with problem-solving acumen in ambiguous or high-pressure environments.
- Excellent communication and stakeholder collaboration skills.
- Eagerness to learn, mentor, and contribute to a culture of continuous improvement.