C
Engineering Team Lead, API Security
Not specifiedFull-timeEngineering ManagementCybersecurityEnterprise Software
Lead an engineering team developing an API security product. Own technical architecture, roadmap, delivery, and team growth while remaining hands-on in design and code reviews.
Responsibilities
- Own the API security product roadmap with Product Management and align it with related platform strategy
- Lead end-to-end architecture and delivery of API security capabilities, including discovery, schema enforcement, runtime protection, anomaly detection, sensitive data handling, and shift-left testing
- Contribute to code and lead design and in-depth code reviews
- Guide development of scalable, multi-tenant cloud solutions, microservices, and high-volume security telemetry pipelines
- Mentor and grow the engineering team, conduct one-to-ones, and support performance and technical development
- Coordinate delivery with product and platform teams
- Advance a prevention-first approach to API security
- Represent the team with customers, analysts, and at industry events
Requirements
- At least 3 years as a team lead, engineering manager, or equivalent
- At least 7 years of software engineering experience
- Experience building teams, shipping production software, and owning a product or major component end-to-end
- Hands-on experience with a high-level programming language such as Python or Go
- Expertise designing and operating production-scale microservices on Kubernetes and AWS
Nice to have
- Bachelor’s or master’s degree from a recognized university
- Experience with API security, WAF, WAAP, or API gateway products
- Experience with reverse proxies, NGINX, Envoy, API gateways, or service mesh
- Background in cybersecurity, networking, or large-scale infrastructure
- Knowledge of web and API security, OWASP API Top 10, JWT, OAuth, or mTLS
- Familiarity with HTTP/1.1, HTTP/2, HTTP/3, GraphQL, or gRPC
- Experience designing systems across SaaS, on-premises, and hybrid environments
- Familiarity with C++ or Go for performance-critical code