Sr Security Software Specialist - API Security Engineer
Teachers Insurance and Annuity Association of America (TIAA)2 days ago
Charlotte, NC, USA or Dallas, TX, USASenior
Base Salary
$160k - $210k/yr
Responsibilities
- Define the development strategy and well-architected enterprise solutions for the API Security engineering team.
- Design and implement secure architectures for applications, APIs, and cloud platforms, including authentication, encryption, and security monitoring.
- Conduct security assessments through code reviews, threat modeling, vulnerability assessment, remediation, and automated testing integration.
- Establish security standards, best practices, secure coding guidance, and controls for regulatory compliance.
- Collaborate with cross-functional teams to integrate security throughout the software development lifecycle.
- Use Generative AI or traditional AI to automate and enhance cybersecurity practices and improve operational efficiency.
- Provide technical leadership and mentorship to junior engineers inside and outside the team.
Requirements
- Bachelor's degree or equivalent experience.
- At least 5 years of experience in software engineering or application security roles; 7 or more years preferred.
- At least 5 years of experience with a major programming language such as Java, Python, C#, or Go, including secure coding practices.
- At least 3 years of hands-on web application or API security experience involving cryptographic methods, authentication and authorization frameworks, or secure key management.
- At least 2 years of experience with Agile software development practices.
- At least 2 years of experience working on one or more cloud platforms, including AWS, Microsoft Azure, Oracle Cloud, or Google Cloud Platform.
- Preferred: 3 or more years of full-stack development experience using UI frameworks such as React JS, Next JS, or Auth JS.
- Preferred: experience with web application and API security testing, vulnerability assessment, remediation, threat modeling, and security architecture reviews.
- Preferred: knowledge of NIST identity and security, OWASP Top 10, hardening standards, and regulatory frameworks such as NY-DFS.
- Preferred: at least 1 year of experience using open-source Generative AI or traditional AI software to improve operational efficiency.
Benefits
- Comprehensive Total Rewards package with a superior retirement program and health, wellness, and work-life offerings.
- Collaborative in-office work environment.
- Learning experiences and development pathways.
- Base pay range of $160,000 to $210,000 per year, excluding additional incentive compensation.
About Teachers Insurance and Annuity Association of America (TIAA)
TIAA is a privately held, not-for-profit financial services organization providing retirement plans, annuities, IRAs, mutual funds, life insurance, 529 plans, and brokerage services to employees and institutions in education, healthcare, and the nonprofit sector. Founded in 1918 and headquartered in New York, it also offers investment management through its Nuveen subsidiary. Its revenue comes from fees on asset management, insurance, and brokerage services.