API Security Engineering Lead (Hybrid)
Marks & Spencer Group plc22 hours ago
Montréal, CanadaStaff+
Responsibilities
- Lead engineering, deployment, and operational management of API Security and API Discovery solutions.
- Drive enterprise onboarding and adoption of API security capabilities.
- Define and execute API inventory, discovery, classification, and governance strategies.
- Improve API visibility, threat detection, and risk management with application and infrastructure teams.
- Own the API Security product roadmap and associated project portfolio, including requirements, success metrics, and implementation plans.
- Coordinate integrations with asset inventory/CMDB, SDLC and DevSecOps pipelines, WAF platforms, and security monitoring and analytics solutions.
- Lead stakeholder workshops and requirements gathering and act as the primary liaison with external vendors.
- Coordinate implementation, issue resolution, risk management, governance reviews, escalations, and delivery commitments.
- Develop security standards, procedures, operating models, architecture requirements, audits, metrics, KPIs, and governance processes.
- Provide leadership, mentorship, and guidance to analysts and project contributors.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline.
- More than eight years of experience in cybersecurity, application security, security architecture, product management, or security program delivery.
- Strong understanding of API security, Web Application Firewalls, cloud security, security governance, and risk management.
- Experience leading large-scale cross-functional initiatives and delivering complex technology programs.
- Strong stakeholder management and communication skills.
- Experience working with third-party security vendors and enterprise security platforms.
- Experience with API security platforms such as Akamai, Noname, or similar technologies is an asset.
- Knowledge of DevSecOps and software development lifecycle integration is preferred.
- Knowledge of both French and English is required.
Benefits
- Hybrid work environment combining remote work and office attendance in Montreal, Quebec.
- Employee benefits and perks supporting employees and their families.
- Equal-opportunity and inclusive workplace with opportunities for internal career mobility.
Categories
About Marks & Spencer Group plc
Marks & Spencer Group plc is a British retailer selling clothing, home goods, and food to consumers through stores and ecommerce, with a focus on own-brand products. The company is listed on the London Stock Exchange, was founded in 1884, and is headquartered in London. In the UK, its online grocery offering runs via Ocado Retail, a joint venture in which M&S holds a significant stake.