{"id":56146,"url":"https://alion.io/job/fiserv-api-security-engineer","title":"API Security Engineer","company":{"id":2459,"name":"Fiserv","domain":"fiserv.com","url":"https://alion.io/company/fiserv","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":51,"ghost_share":0.078,"stale_share":0.294,"repost_share":0.118,"time_to_fill_p50_days":23,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berkeley Heights, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":186000,"currency":"USD","period":"year","gross":null,"usd_annual":186000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-13T00:00:00Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-11-02T15:54:53Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":81},"description":"Calling all innovators - find your future at Fiserv.\nWe're Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we're involved. If you want to make an impact on a global scale, come make a difference at Fiserv.\nJob Title\nAPI Security EngineerAbout your role:\nYou will help build a best-in-class API security program designed for the speed of modern financial services and shape how APIs are secured end-to-end, design through runtime, using cutting-edge protection technologies and analytics, partnering closely with top engineers across product, platform, and security. You will help turn API telemetry into actionable intelligence, reduce risk at scale, and raise the bar for secure engineering across the organization. As an API Security Engineer, you will focus on protecting critical API ecosystems by combining secure-by-design guidance, runtime protections, automation, and data-driven governance. You will be hands-on with modern API security capabilities (discovery, posture, threat detection, abuse prevention, and response) and help integrate them into the DevSecOps lifecycle so teams can move fast without compromising trust.\nWhat you will do:\nRuntime API protection: Implement and tune runtime controls (e.g., behavioral detection, anomaly and abuse prevention, bot defense, schema enforcement, mTLS/OAuth validation, rate limiting, and threat response) across API gateways, service mesh, and edge layers.\n\nSecure API design guidance: Partner with engineering teams to define and promote secure API patterns (authentication/authorization, input validation, error handling, pagination, idempotency, versioning, and least-privilege access). Provide practical guidance aligned to OWASP API Security Top 10 and modern design standards (Open API/JSON Schema).\n\nAutomation and integration: Build automation that embeds API security into CI/CD (policy-as-code, automated checks against Open API specs, secrets scanning, SAST/DAST/API testing, and runtime-to-ticket workflows). Reduce friction through reusable tooling and self-service guardrails.\n\nData analytics and insights: Develop dashboards and analytics using API telemetry and security findings to measure risk, adoption, control effectiveness, and program outcomes. Translate signals into prioritized actions for engineering and leadership.\n\nAPI security governance: Help define governance for API inventories, ownership, classification, security requirements, exception handling, and control validation. Drive consistent standards across teams while enabling delivery velocity.\n\nDevSecOps lifecycle partnership: Work with product and platform teams to integrate security requirements into backlog planning, threat modeling, design reviews, testing, release readiness, and incident response.\n\nFramework alignment (financial services): Map controls and program outcomes to relevant industry frameworks and expectations (e.g., NIST, ISO 27001, PCI DSS, FAPI, and OWASP guidance). Support audit readiness through clear control documentation and evidence automation.\n\nContinuous improvement and innovation: Evaluate emerging technologies and techniques for API discovery, posture management, and runtime detection. Pilot, measure, and scale what works.\n\nWhat you will need to have:\n5+ years related IT and cyber protection experience desired.\n\nStrong foundation in API security concepts: authN/authZ (OAuth2/OIDC, JWT), session/token handling, scopes/claims, rate limiting, schema validation, and common API abuse patterns.\n\nPractical experience with runtime protection in one or more of API gateways, WAF/WAAP, service mesh, ingress controllers, or specialized API security platforms.\n\nExperience building automation in CI/CD and cloud-native environments (policy-as-code, scripting, pipelines, Git-based workflows).\n\nAbility to use data and telemetry (logs, traces, metrics) to detect issues, tell a clear story, and drive priorities and working knowledge of secure software development and DevSecOps practices, and the ability to influence engineering outcomes through partnerships.\n\nComfort collaborating across security, SRE, platform, and application teams with clear communication, pragmatic decision-making, and strong follow-through.\n\nExpert knowledge of and experience with maintaining cyber technologies that can protect operational API systems, such as:\nTraceable\n\nSalt Security\n\nNoName\n\nBachelor’s degree in computer science, or a relevant field, or an equivalent combination of education, work, and/or military experience\n\nWhat would be great to have:\nExperience with Open API tooling, API testing, fuzzing, and contract testing.\n\nFamiliarity with threat modeling approaches and abuse-case analysis for APIs.\n\nExperience aligning security controls to financial industry expectations and. producing evidence that stands up to audit scrutiny.\n\nCISSP or other professional cyber certification desirable.\n\nHow you’ll work\nThis role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.\n\nTravel\nApproximately 10% travel off-site or to other office locations is expected.\n\nSponsorship\nYou must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered.\n\nSalary Range\n$110,000.00 - $186,000.00These pay ranges apply to employees in New Jersey and New York. Pay ranges for employees in other states may differ.\nIt is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.\nFor incentive eligible associates, the successful candidate is eligible for an annual incentive opportunity which may be delivered as a mix of cash bonus and equity awards in the Company’s sole discretion.Thank you for considering employment with Fiserv. Please:\nApply using your legal name\nComplete the step-by-step profile and attach your resume (either is acceptable, both are preferable).\nOur commitment to Equal Opportunity:\nFiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.\nIf you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact . Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv’s Disability Accommodation Policy for additional information.\nNote to agencies:\nFiserv does not accept resume submissions from agencies outside of existing agreements. Pleasedo not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.\nWarning about fake job posts:\nPlease be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.","description_format":"text","description_chars":7851,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Financial Software & Embedded Finance","Payment Processing & Gateways","Smartphones"],"lifecycle":[{"event":"open","at":"2026-08-13T00:00:00Z"},{"event":"close","at":"2026-09-01T14:50:15Z"},{"event":"reopen","at":"2026-09-01T17:50:17Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.466,"p_room":0.28,"age_days":81,"expected_fill_days":23,"reasons":["conf:5","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":186000,"is_top_pay":true},"html_url":"https://alion.io/job/fiserv-api-security-engineer","json_url":"https://alion.io/job/fiserv-api-security-engineer.json","meta":{"generated_at":"2026-11-02T18:32:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25905,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2459},"rest":"https://alion.io/mcp/rest/get_company?id=2459"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffiserv-api-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffiserv-api-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffiserv-api-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fiserv-api-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffiserv-api-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":56146}},{"tool":"search_jobs","arguments":{"company":"fiserv.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":56146},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}