Typical Day in Role:
•Work with CIO teams to understand and document how the API’s have been developed – design, technology stack, API types, authentication mechanisms, scopes etc.
•Develop a set of security requirements for the API’s based on industry best practices like OWASP Web and API Top 10
•Develop a set of unit tests that can be applied to the API’s, to validate during build time
•Code, test and validate these unit tests against the API’s
•Integrate the unit tests with a pipeline for build time validation
•Iterate on the process with multiple business lines and types of applications
Candidate Requirements/Must Have Skills:
1) 10+ years coding experience in OOP languages, ideally with Java
2) 7+ years’ experience of programming API’s like REST, SOAP, gRPC etc
3) 7+ years programming Web based application – SPA based like Angular, React as well as traditional apps like SpringBoot, JSP etc (please list which)
4) 5+ usage of API testing tools, ideally with Postman
5) 3+ years documented application architectures using Visio or PowerPoint
Nice-To-Have Skills:
1) Secure coding skills including OWASP Web and OWASP API Top 10
2) Experience with API Authentication methods like OIDC, OAuth etc
3) Security Testing with tools like Burp Suite
4) Financial industry experience
Soft Skills Required:
• Ability to understand and document application design by communication with various stakeholders like Team Leads, BS’s, Solution Architects etc
• Ability to communicate to Senior Management on the outcomes of initiatives and weekly status/progress reports
Education:
Working experience preferred, education not mandatory