Senior Platform Engineer
Commonwealth Bank of Australia1 month ago
Bengaluru, IndiaSenior
Responsibilities
- Investigate API posture and runtime security alerts using HTTP traffic insights and manage API discovery, monitoring, and inventory through Akamai Noname.
- Assess authentication, authorization, and common security risks across REST and GraphQL APIs.
- Validate findings, identify false positives, and prioritize risks based on severity, exposure, and business impact.
- Work with API owners and engineering teams to remediate findings and confirm appropriate closure.
- Configure and improve API security policies, scanning, workflows, and integrations.
- Automate workflows and repetitive security activities using APIs and scripting.
- Manage API security findings and vulnerabilities through ServiceNow and PagerDuty while following incident-response workflows.
- Support ServiceNow SecOps dashboards, API governance, control compliance, CMDB data quality, and API traffic-source integration.
Requirements
- At least 8 years of IT or cybersecurity experience with a strong, demonstrable focus on API security.
- Deep knowledge of HTTP request and response lifecycles, security headers, status codes, methods, and attack investigation.
- Strong knowledge of API security vulnerabilities and controls, including the OWASP API Security Top 10 and relevant web application security risks.
- Experience triaging API security incidents, inspecting raw HTTP traffic, and distinguishing malicious payloads from false positives.
- Practical working knowledge of OAuth 2.0, OIDC, JWT, and mTLS.
- Hands-on experience with WAAP or dedicated API security platforms and API gateways such as Noname, Salt Security, Traceable, Apigee, or Kong.
- Understanding of REST and GraphQL architecture and common vulnerability surfaces.
- Strong analytical and investigative skills using HTTP logs, API traffic data, SIEM dashboards, and ServiceNow.
- Experience with Terraform or CloudFormation, AWS, GitHub, GitHub Actions, Docker, Kubernetes, Python, Bash, or PowerShell is beneficial.
- API or web application penetration-testing experience is advantageous.
- Bachelor's or Master's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
Benefits
- The role is based at Manyata Tech Park in Bangalore.
- Accessibility support is available through HR Direct.
- Applications from existing Commonwealth Bank Group employees must be submitted through Sidekick.
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.