API Security Engineer

About the Role

We are looking for a Senior API Security Engineer to help strengthen API security for a client in the banking sector . In this role, you will work on a central API Security platform , helping define and implement security standards, controls, policies, and automated guardrails across a large and complex API landscape. You’ll work closely with engineers, architects and security specialists to ensure APIs are secure, compliant, and resilient against evolving threats.

Your Job

• Translate API security standards and requirements into practical platform policies and automated security controls .
• Assess API security findings and determine their severity, criticality and potential impact.
• Translate security findings into improvements to policies, controls and business rules.
• Strengthen authentication and authorization mechanisms across APIs.
• Work with concepts such as OAuth, JWT, mTLS , session management, object-level authorization and attribute-level authorization.
• Apply API and application security best practices, including OWASP, MITRE and CVE .
• Collaborate with engineers, architects and security specialists across the organization.
• Contribute to the continuous improvement of API security standards and governance.
• Help automate security controls and guardrails across the API landscape.
• Take ownership of API security topics and proactively identify opportunities for improvement.

Your Profile

• Strong experience in API Security and Application Security .
• Strong understanding of cybersecurity principles, security architecture and cloud security .
• Deep knowledge of authentication and authorization , including OAuth, JWT, mTLS, and session management.
• Experience with API authorization concepts such as object-level and attribute-level authorization.
• Strong knowledge of security frameworks and methodologies such as OWASP, MITRE and CVE.
• Experience assessing vulnerabilities and translating security findings into actionable improvements.
• Experience translating security requirements into platform policies, automated controls, or security guardrails.
• A proactive mindset and ability to take ownership in a complex technical environment.
• Experience with API Security platforms such as Akamai Noname, Salt Security, Cequence, 42Crunch or similar is a strong advantage, but not a requirement.

We Offer

• We Offer a hybrid working environment
• 25 vacation days
• A high-impact role in a diverse, international environment
• Salary up to €7.400 gross per month based on 36 hours

Our Client

Our client is a leading financial institution in the Netherlands, focused on innovation, scalability and modern cloud-based platforms. Their engineering teams work on critical systems that support large-scale digital services and real-time event-driven processing.They offer a strong engineering culture with a focus on automation, platform thinking, and continuous improvement.

Interested?

Are you the Senior API Security Engineer we are looking for?

Let’s connect!

Chrysi Fotiadou

+31 6 82368115

chrysifotiadou@yorteam.nl