API Security Engineer

Position: API Security Engineer
Location: Plano, Texas
Duration: 12 Months Contract
Job ID: 169002

Job Overview:
The Client Technology team is seeking a highly motivated and knowledgeable API Security Engineer to join their security team. In this role, you will be responsible for securing APIs across the organization by identifying vulnerabilities, implementing best practices, and collaborating with development teams to ensure secure design and deployment of APIs.

Responsibilities:

• Design and implement security controls for APIs across internal and external applications.
• Conduct API security assessments, including penetration testing, fuzzing, and vulnerability scanning.
• Monitor API traffic for anomalies, abuse, and potential threats using API gateways and security tools.
• Collaborate with development and DevOps teams to integrate security into the API lifecycle (design, development, testing, deployment).
• Define and enforce API security standards, including authentication, authorization, rate limiting, and encryption.
• Develop and maintain API security policies and documentation.
• Stay current with emerging API threats, vulnerabilities, and security technologies.
• Assist in incident response and forensic analysis related to API security breaches.
• Evaluate and implement API security tools such as WAFs, API gateways, and runtime protection platforms.

Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 3+ years of experience in application or API security.
• Strong understanding of RESTful and GraphQL APIs, OAuth2, JWT, and API authentication mechanisms.
• Experience with API gateways, including configuring authentication, authorization, rate limiting, and threat protection policies (e.g., Apigee, AWS API Gateway, Kong, Azure API Management).
• Familiarity with OWASP API Security Top 10 and secure coding practices.
• Hands-on experience with tools like Postman, Burp Suite, OWASP ZAP, or similar.
• Knowledge of common API vulnerabilities such as injection, broken authentication, excessive data exposure, etc.

Preferred Qualifications:

• Certifications such as GIAC Web Application Penetration Tester (GWAPT), Certified API Security Professional (by APIsec University), or Offensive Security Web Expert (OSWE).
• Experience with DevSecOps and CI/CD pipeline integration.
• Familiarity with cloud-native API security in AWS, Azure, or Google Cloud Platform.
• Familiarity with securing and managing API gateways, including policy enforcement, traffic monitoring, and integration with identity providers.
• Scripting or programming experience (Python, JavaScript, etc.).

About PTR Global: PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada. For more information visit ;br>
At PTR Global, we understand the importance of your privacy and security. We NEVER ASK job applicants to:

• Pay any fee to be considered for, submitted to, or selected for any opportunity.
• Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process.
• Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup.

Pay Range: $90 - $95 Hourly on W2

The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work.

If you receive a suspicious message, email, or phone call claiming to be from PTR Global do not respond or click on any links. Instead, contact us directly at +1 . To report any concerns, please email us at
```