> Markdown version of [/jobs/ext/4668306-sr-security-software-specialist-api-security-engineer](https://www.wearedevelopers.com/jobs/ext/4668306-sr-security-software-specialist-api-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Security Software Specialist - API Security Engineer

- **Company:** TIAA
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Salary:** $160,000 - $210,000
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, Amazon Web Services, User Authentication, Authentication Protocols, Automation of Tests, Microsoft Azure, C Sharp (Programming Language), Cloud Computing Security, Code Review, Cyber Security, Cryptographic Protocols, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Network Security, OAuth, Open Source Technology, OpenID, Open Web Application Security, Next.js, Security Software, Software Engineering, Software Systems, Web Applications, Google Cloud, ReactJS, Software Security, Ios Frameworks, Generative AI, Oracle Cloud Infrastructure, Vulnerability Analysis, Golang
- **Published:** November 11, 2026
- **Apply:** https://www.dice.com/job-detail/a8c83a80-beb8-454c-95df-9520742c35ab

## About the Role

* Bachelor's Degree or Equivalent Experience Required, * 5+ years of experience in software engineering or application security roles

 * 5+ years of experience in at least one major programming language (Java, Python, C#, Go) with secure coding practices

 * 3+ years of hands-on experience with web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management
 * 2+ years of experience working with Agile software development practices

 * 2+ years of experience working on one or more cloud platforms such as AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform

Preferred Skills:

 * 3+ years of full stack development experience using UI frameworks such as React JS, Next JS, Auth JS

*

 * Hands-on experience with web application and API security testing, vulnerability assessment, and remediation

 * Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks (NY-DFS)

 * Ability to conduct effective threat modeling and security architecture reviews for complex software systems

 * 1+ years' experience using open source Generative or traditional AI software solutions to automate or improve operational efficienc

Related Skills

Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively

## Description

Sr Security Software Development Engineer leads the development strategy of the API Security engineering team which is responsible for building horizontal enterprise level security solutions.

You will be responsible for defining what a well-architected enterprise solution looks like and for leading a team of engineers to build the solution. You will create workstreams and work closely with other senior engineers to deliver critical initiatives. You will identify opportunities to solve security problems in creative ways by leveraging your expertise in software development, application of AI solutions and scalable architecture.

Key Responsibilities and Duties

 * Design and implement secure architectures for applications, APIs and cloud platforms including authentication mechanisms, encryption protocols, and security monitoring frameworks
 * Conduct comprehensive security assessments through code reviews, threat modeling, and automated testing integration within CI/CD pipelines
 * Establish and maintain security standards, best practices, and guidelines while educating development teams on secure coding practices
 * Collaborate with cross-functional teams to integrate security throughout the software development lifecycle and ensure compliance with relevant regulations
 * Identify opportunities and implement solutions to automate & enhance cyber security practices using Generative AI or Traditional AI mechanisms
 * Improve operational efficiency of processes or software systems through automation
 * Provide technical leadership & mentorship to junior engineers both within and outside the team