API Security Engineer

Profile Summary

This API Security Engineer builds robust security into the core of application development, focusing on automating vulnerability detection and prevention. They are passionate about shifting security left, empowering development teams at companies like Airwallex to write secure code from the outset and integrate security seamlessly into the CI/CD pipeline.

Problems Solved

• Implemented automated API security testing within CI/CD, reducing critical API vulnerabilities found in production by 40% over 12 months.
• Developed and deployed custom WAF rulesets for critical API endpoints, blocking over 15,000 malicious requests weekly and preventing potential data breaches.
• Streamlined API security review processes, decreasing the average time-to-production for new API features by 25% while maintaining security standards.

What They Build

They build and integrate security tools and processes specifically for API ecosystems, including automated testing frameworks, custom security policies, and developer-friendly security guidelines. Their work ensures APIs are secure by design and continuously monitored for threats.

What Would Make Them Move

Looking for a mid-level AppSec role where I can transition from pure development into security full-time. Want a company that values developers who understand security — not just security people who read code. Pair reviews and threat modeling are my thing.

Mission & Values

Driven to help teams build security into the development lifecycle. Believe in shifting left and empowering developers to write secure code.

Growth Areas

Open to