Senior Platform Engineer
Commonwealth Bank of Australia2 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Investigate API posture and runtime security alerts using HTTP traffic insights.
- Manage API discovery, monitoring, inventory lifecycle, and security operations through Akamai Noname.
- Assess authentication, authorization, and common security risks across REST and GraphQL APIs.
- Validate findings, identify false positives, and prioritize risks by severity, exposure, and business impact.
- Partner with API owners and engineering teams to remediate findings and confirm closure.
- Configure and improve API security policies, scanning, workflows, and integrations.
- Automate security workflows and repetitive activities using APIs and scripting.
- Manage API security findings and vulnerabilities through ServiceNow and PagerDuty using incident response workflows.
- Support ServiceNow SecOps dashboards, API governance, control compliance, CMDB data quality, and API traffic integrations.
Requirements
- 8+ years of IT or cybersecurity experience with a strong focus on API security.
- Deep knowledge of HTTP request and response lifecycles, security headers, status codes, methods, and attack investigation.
- Strong understanding of API security vulnerabilities, abuse cases, controls, OWASP API Security Top 10, and web application security risks.
- Experience triaging API security incidents, inspecting raw HTTP traffic, and distinguishing malicious payloads from false positives.
- Working knowledge of OAuth 2.0, OIDC, JWT, and mTLS.
- Hands-on experience with WAAP or API security platforms and API gateways such as Noname, Salt Security, Traceable, Apigee, or Kong.
- Understanding of REST and GraphQL architectures and vulnerability surfaces.
- Strong analytical and investigative ability using HTTP logs, API traffic data, SIEM dashboards, and SNOW.
- Beneficial experience with Terraform, CloudFormation, AWS, GitHub, GitHub Actions, Docker, Kubernetes, Python, Bash, PowerShell, observability tools, or API/web application penetration testing.
- Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
Benefits
- Role based in Bangalore at Manyata Tech Park.
About Commonwealth Bank of Australia
Australia’s leading provider of financial services including retail, premium, business and institutional banking, funds management, superannuation, insurance, investment and sharebroking products and services. We are a business with more than 800,000 shareholders and over 52,000 employees. We offer a full range of financial services to help all Australians build and manage their finances. Connect with us, we'd like to hear from you: facebook.com/commonwealthbank twitter.com/commbank youtube.com/commbank youtube.com/commbankbusiness instagram.com/commbank Our Community Guidelines can be found at: https://www.commbank.com.au/support/social-networks.html For information on our Privacy Policy visit https://www.commbank.com.au/support/privacy