inhousefyi
← Back to listings

Senior API Security Engineer

EncoraKuala Lumpur, Malaysia · Posted 2 months ago
Full-time
Apply now

Description

Key Responsibilities:
● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass
Assignment) that traditional firewalls miss.
● Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT
implementations to ensure users can only access their own data.
● Attack Simulation: Script automated attacks against the API Gateway to test rate limiting
and fraud detection rules.
● Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong,
or Azure API Gateway) for maximum security.
● Auth & Partner Integration: Deliver new security design patterns and components for
authentication, authorization, SSO, MFA, and Partner security. Standardize how we
consume external APIs (Open Banking) and how we secure our own exposed endpoints.

Technical Requirements:
● Strong scripting skills (Python) to automate API attacks.
● Expertise in REST and GraphQL security.
● Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows.
● Experience with API Security tools (Postman, Burp Suite, 42Crunch).

Similar jobs

EncoraKuala Lumpur, Malaysia

Key Responsibilities 1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and A…

Full-time
EncoraKuala Lumpur, Malaysia

Key Responsibilities: ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written. ● Pipeline Automation: Architect and maintain the SAST/DAST/S…

Full-time
EncoraKuala Lumpur, Malaysia

Key Responsibilities: ● App Hardening: Implement and maintain RASP (Runtime Application Self-Protection), Code Obfuscation (ProGuard/DexGuard), and Root/Jailbreak detection mechanisms. ● Secure Connectivity: Enforce Cert…

Full-time
EncoraKuala Lumpur, Malaysia

Role Summary: The IAM Operations & Access Review Support Analyst is responsible for executing day-to-day IAM operational activities, supporting access reviews, identity lifecycle management, privileged access adminis…

Full-time
EncoraKuala Lumpur, Malaysia

We are seeking a hands-on Network Security Engineer to operate and continuously improve our network security stack—primarily enterprise firewalls (Palo Alto, Fortinet, Cisco), secure web gateways/proxies, and site-to-sit…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
EncoraSingapore, Singapore

Job Title - Cybersecurity Engineer Key Skills - Tenable Nessus Experience - 5+ years Location - Singapore Requirements At least 5 years of relevant experience in cybersecurity. Candidates with relevant certifications suc…

Full-time
Transmit SecurityTel Aviv-Yafo, Gush Dan, Israel

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
Point72Bengaluru, India

JOB TITLE Network Security Engineer A Career with point72’S TECHNOLOGY TEAM As Point72 continues to reimagine the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positio…

Full-time

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote

Est. 120,000 USD

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offerin…

Full-timeRemote
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaToronto, Ontario, Canada

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
ASP.Net Developer2 months ago
EncoraKuala Lumpur, Malaysia

Minimum Job Requirements: Degree in IT from an accredited institution. Above 2 years of experience in IT application development environment (Application solutioning on design and development – digital IT systems) Strong…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time
OktaBengaluru, India

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This…

Full-time