API & Platform Engineer - 12 Month Fixed Term Contract

Job summary

The API & Platform Engineer role focuses on enhancing application and platform security for a modern technology environment. Key responsibilities include hands-on remediation of application code vulnerabilities using SAST, DAST, and SCA tools, as well as strengthening GitHub and CI/CD practices to mitigate risks and ensure secure engineering patterns.

Qualifications

• Experience implementing security fixes in application and API codebases using Node.js, TypeScript, and Python.
• Understanding of SAST, DAST, and SCA findings and their remediation.
• Experience in GitHub administration and security governance.
• Familiarity with cloud-native platforms, APIs, and infrastructure as code.
• Knowledge of the OWASP Top 10 and software supply-chain security.
• Experience in CI/CD security engineering and automated testing.
• Ability to translate security findings into practical remediation requirements.

Responsibilities

• Perform hands-on remediation of application code vulnerabilities identified through SAST, DAST, and other security tools.
• Remediate vulnerable open-source and third-party dependencies identified through SCA.
• Strengthen repository security by addressing exposed secrets and insecure configurations.
• Collaborate with platform, application, and product teams for effective remediation.
• Enhance GitHub and CI/CD security through secure repository baselines and automated integrations.
• Document practical controls and secure engineering patterns.
• Lead security risk exemptions by assessing residual risk and coordinating approvals.

Skills

Relocation