As an API Security Engineer within the central API Security team at ABN AMRO, you will play a key role in strengthening the bank’s digital resilience by securing the APIs that power its customer and partner ecosystems.
You will contribute to the API security strategy, standards, governance and implementation across the bank, ensuring APIs meet internal security requirements and are protected against evolving threats.
Your Responsibilities
- Translate API security standards, controls and best practices into practical platform policies, security controls and automated guardrails.
- Develop and automate business logic and security policies to protect the bank’s API landscape.
- Assess API security findings and determine their severity, criticality and business impact.
- Translate security findings into concrete improvements to policies, controls and business rules.
- Work closely with software engineers, architects and security specialists to embed security throughout the API lifecycle.
- Help ensure APIs are secure, compliant, resilient and aligned with the bank’s security architecture.
- Contribute to the continuous improvement of API security standards and governance.
Your Profile
You are a technically strong security specialist with a pragmatic, analytical and proactive mindset. You bring:
- Strong knowledge of cybersecurity principles and security architecture, including cloud and application security.
- Deep expertise in API and application security.
- Strong understanding of security frameworks and standards such as OWASP Top 10, MITRE and CVE.
- Advanced knowledge of authentication and authorization, including OAuth, JWT, session management, mTLS, object-level authorization and attribute-level authorization.
- The ability to assess security risks and translate complex findings into practical security improvements.
- Experience translating security requirements into platform policies, automated controls and guardrails.
- Excellent communication skills and the ability to work effectively with both technical and security stakeholders.
- A proactive attitude with a strong sense of ownership and responsibility.
Nice to Have
- Experience managing or working with API Security platforms, such as Akamai, Noname, Salt or Cequence.
The preferred start date is as soon as possible, subject to successful screening and completion of the onboarding process. Please note that the start date is indicative and cannot be guaranteed, as it depends on the duration and outcome of these processes.
