Job Description
Typical Day in Role:
- Work with CIO teams to understand and document how the API’s have been developed – design, technology stack, API types, authentication mechanisms, scopes etc.
- Develop a set of security requirements for the API’s based on industry best practices like OWASP Web and API Top 10.
- Develop a set of unit tests that can be applied to the API’s, to validate during build time.
- Code, test and validate these unit tests against the API’s.
- Integrate the unit tests with a pipeline for build time validation.
- Iterate on the process with multiple business lines and types of applications.
Candidate Requirements/Must Have Skills:
- 10+ years coding experience in OOP languages, ideally with Java.
- 7+ years’ experience of programming API’s like REST, SOAP, gRPC etc.
- 7+ years programming Web based applications – SPA based like Angular, React as well as traditional apps like SpringBoot, JSP etc (please list which).
- 5+ years usage of API testing tools, ideally with Postman.
- 3+ years documented application architectures using Visio or PowerPoint.
Nice-To-Have Skills:
- Secure coding skills including OWASP Web and OWASP API Top 10.
- Experience with API Authentication methods like OIDC, OAuth etc.
- Security Testing with tools like Burp Suite.
- Financial industry experience.
Soft Skills Required:
- Ability to understand and document application design by communication with various stakeholders like Team Leads, BS’s, Solution Architects etc.
- Ability to communicate to Senior Management on the outcomes of initiatives and weekly status/progress reports.
Education:
Working experience preferred, education not mandatory.
#J-18808-Ljbffr