Strengthen the security of internally developed products by embedding security into the software development lifecycle, partnering with engineering and infrastructure security teams to identify and address risks early.
Responsibilities
Own and deliver application security assurance for internally developed products, integrating security practices throughout the SDLC
Embed security checks into CI/CD pipelines, including SAST, DAST, software composition analysis, and secret detection
Promote shift-left security by advising development teams on secure design, implementation, and coding practices
Conduct targeted code reviews to uncover flaws before formal penetration testing
Collaborate with the Infrastructure Security Specialist to validate vulnerabilities and risk scenarios ahead of formal testing
As a Software Security Specialist Senior within PNC's Technology organization, you will be based in Denver, CO; Phoenix, AZ; Birmingham, AL; Dallas, TX; Pittsburgh, PA or Cleveland, OH.
Lead the security strategy and operations for Mama Money’s APIs, integrations, and third‑party services, ensuring compliance with ISO 27001, POPIA, and other regulatory frameworks.
Responsibilities
Own security of public and partner APIs, setting standards for authentication, secrets handling, request signing, rate limiting and input validation
Threat model new partner integrations and review existing ones
Monitor third‑party calls for anomalies and failures
Own and manage WAF, bot and DDoS protection, and false‑positive tuning
Set up alerting on unusual traffic and investigate incidents
Base Salary: $112,000.00 – $228,800.00
Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.
Responsibilities
Serve as the dedicated owner responsible for advancing and maturing the enterprise API Security Program, including governance, strategy, risk management, and stakeholder coordination.
Drive API discovery, inventory, risk visibility, and remediation activities across the enterprise, helping teams identify and address API security risks throughout the SDLC.
Lead the continued operationalization and adoption of Akamai API Security, including passive findings, active testing, metrics, reporting, and integrations with broader security capabilities.
Partner across Application Security, Security Operations, Data Protection, development teams, and other stakeholders to integrate API Security into existing security and development processes.
Establish sustainable API Security processes, standards, guidance, metrics, and reporting that demonstrate measurable risk reduction and continued program maturity.
Offensive Security Engineer (Pentesting & DevSecOps)Klar Technologies SA de CV SFP · Mexico City, Mexico+2 more
Application Security EngineerGovernment of Singapore – Public Service (Careers@Gov) · Singapore
Information Security LeadMama Money · Remote