API Security Analyst

Introduction

We are looking for a passionate and detail-oriented Junior API Security Consultant to join our cybersecurity team. This role is ideal for someone with foundational experience in API development or security and a strong interest in securing modern applications. You will support senior consultants in assessing and improving API security, including hands-on testing and secure design practices.

Your role and responsibilities

• Implement and enforce security measures and policies as defined by the Senior API Security Consultant.

• Assist in conducting thorough system and user acceptance tests as per the test plans.

• Monitor API traffic and usage patterns for potential security threats or anomalies.

• Perform regular security audits and vulnerability assessments on APIs.

• Participate in the creation of custom investigation reports, dashboards, and policies.

• Collaborate with the team for the integration of the API Security platform with SIEM (Security Information and Event Management) systems like QRadar.

• Support the onsite managed services post-implementation, including issue resolution and monitoring of APIs in production environments.

• Contribute to the handover training of designated client resources, ensuring they can effectively manage the API Security platform environment.

Required education

Bachelor's Degree

Preferred education

Bachelor's Degree

Required technical and professional expertise

Experience:

- 3+ years of cybersecurity or SOC experience with exposure to API technologies.

- Familiarity with API request structures (e.g., REST, JSON, HTTP headers, JWT).

- Experience with Cequence API Security is preferred. Familiarity with other API security platforms (e.g., Salt Security, or equivalent solutions) will also be considered a strong advantage.

- Ability to read and analyze API logs and platform findings.

- Basic knowledge of F5 LTM, QRadar, and incident response processes.

Soft Skills:

- Strong analytical and problem-solving abilities with keen attention to detail.

Preferred technical and professional experience

Preferred Certifications

- API Security Fundamentals (Cloud Academy, Salt Security, etc.)

- CompTIA Security+, CySA+, or equivalent

- Familiarity with MITRE ATT&CK for APIs or OWASP API Security

ABOUT BUSINESS UNIT

IBM Consulting is IBM's consulting and global professional services business, with market leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients' businesses through the power of collaboration. We believe in the power of technology responsibly used to help people, partners and the planet.

YOUR LIFE @ IBM

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.