Sr Security Software Specialist - API Security Engineer

The Sr Security Software Development role focuses on API security engineering strategy and the delivery of horizontal enterprise security solutions across applications, APIs, and cloud platforms. The position involves designing secure architectures, leading security assessments, and applying automation, including AI-driven approaches, to strengthen cyber security practices.

Location and Employment Details

• Location: Dallas, TX (onsite)
• Anticipated posting end date: 2026-11-13
• Career level: 9IC

Compensation

• Base pay range: $160,000/yr - $210,000/yr

Role Summary

The Sr Security Software Development Engineer leads API Security engineering strategy to build well-architected, secure enterprise solutions. The role also includes leading a team to design secure architectures, perform security assessment work, and automate cyber security practices using AI.

Key Responsibilities

• Design and implement secure architectures for applications, APIs, and cloud platforms, including authentication mechanisms, encryption protocols, and security monitoring frameworks
• Perform security assessments using code reviews, threat modeling, and automated testing integration within CI/CD pipelines
• Define and maintain security standards, best practices, and guidelines while educating development teams on secure coding
• Partner with cross-functional teams to integrate security across the software development lifecycle and support compliance with relevant regulations
• Identify opportunities to automate and enhance cyber security practices using Generative AI or Traditional AI mechanisms
• Improve operational efficiency by automating processes or software systems
• Provide technical leadership and mentorship to junior engineers within and outside the team

Required Qualifications

• 5+ years of experience in software engineering or application security roles
• 5+ years using at least one major programming language (Java, Python, C#, or Go) with secure coding practices
• 3+ years hands-on experience in web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management
• 2+ years experience working in Agile software development practices
• 2+ years experience with one or more cloud platforms (AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform)
• Education: Bachelor’s Degree or Equivalent Experience Required

Preferred Skills

• 3+ years of full stack development experience using React JS, Next JS, and Auth JS
• Hands-on experience with web application and API security testing, vulnerability assessment, and remediation
• Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks such as NY-DFS
• Ability to conduct effective threat modeling and security architecture reviews for complex software systems
• 1+ years experience using open source Generative or traditional AI software solutions to automate or improve operational efficiency

Technologies

• Java, Python, C#, Go
• OAuth 2.0, OIDC
• CI/CD pipelines
• AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform
• React JS, Next JS, Auth JS

Additional Skills

• Accountability
• Adaptability
• Business Continuity Planning
• Cloud Computing Security
• Collaboration
• Communication
• Compliance
• Consultative Communication
• Cybersecurity
• Detail-Oriented
• General Risk Management
• Network Security
• Prioritizes Effectively

Benefits

• Superior retirement program
• Highly competitive health, wellness, and work life offerings
• Comprehensive Total Rewards package

Physical Requirements

• Sedentary Work