Senior Program Manager - INTL INDIA

A client of Insight Global is seeking API Security-Technical project manager with proven strong technical competence and leadership capability to contribute towards the success of enterprise wide API security initiatives. The Senior API Security Engineer serves as a subject matter expert in API security and plays an integral role in managing, monitoring & reporting on API security risk reduction.
Primary Responsibilities
5-7 years of experience working with API Security
Perform ongoing governance and follow-through with API owners to ensure implementation of threat-based requirements.
Develop, deliver and keep up-to-date API security standard requirements and design patterns.
Validate implementation of API security controls against outputs of vulnerability testing tools to enable auditability and verifiability.
Serve as an API security technical advisor to application teams.
Evangelize API security design principles.
Collaborate as API security subject matter expert within the organization.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience

American Express is seeking API Security-Technical project manager with proven strong technical competence and leadership capability to contribute towards the success of enterprise wide API security initiatives. The Senior API Security Engineer serves as a subject matter expert in API security and plays an integral role in managing, monitoring & reporting on API security risk reduction.
Primary Responsibilities
5-7 years of experience working with API Security
Perform ongoing governance and follow-through with API owners to ensure implementation of threat-based requirements.
Develop, deliver and keep up-to-date API security standard requirements and design patterns.
Validate implementation of API security controls against outputs of vulnerability testing tools to enable auditability and verifiability.
Serve as an API security technical advisor to application teams.
Evangelize API security design principles.
Collaborate as API security subject matter expert within the organization.

Nice to Have Skills & Experience

Direct hands on experience developing and securing web APIs and web applications: REST, SOAP, gRPC.
Direct hands-on experience with security testing of web services and web APIs.
Solid hands-on experience with leading threat modeling exercises for applications and services.
Solid understanding of risk management, security architecture and secure SDLC practices.
Strong experience and understanding of API identity and access management controls: OAuth 2.0, OIDC, JWT
Strong experience and understanding of familiarity with cryptography controls: Data at rest, in motion and in-use.
Experience with industry standards and frameworks: NIST 800-53, NIST CSF, OWASP, SANS Top 25.
Experience with Java, JavaScript and mobile application development.
Familiarity with database architectures: Oracle, SQL and NoSQL Databases.
Information security professional certifications such as SANS GIAC, CISSP, CISM.
Experience with service-oriented architectures and web services security.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.