What you'll do
Own end-to-end API security architecture — design review, risk profiling, identity, and incident/exploitation analysis — for a fast-growing, high-scale financial-services API ecosystem.
Set the technical direction for the API security program and mature it from where the previous architect left off, rather than simply operating an existing playbook.
Guide the strategy behind our runtime protection platform (Traceable), partnering with the engineers who handle day-to-day tuning, false positives, and blocking-mode operations.
Design identity and access patterns for APIs (OAuth2/OIDC, JWT, scopes/claims, token handling), closing gaps such as overly broad token authorization.
Lead technical investigation of API security incidents and exploitation attempts, translating findings into durable architectural fixes.
Partner closely with a strong, hands-on engineering team (including automation/infrastructure-as-code talent) to turn architectural direction into secure API designs.
Bring architectural judgment to the table — explain the why, not just the what — across design reviews and cross-team security decisions.
Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.
Experience you'll need to have
Significant experience owning API security architecture (or a comparable security architecture discipline), ideally having built or matured a program from the ground up.
Hands-on, personal experience with runtime API protection platforms such as Traceable, Salt Security, or NoName — including configuring, tuning, and investigating alerts (not just research-based familiarity).
Demonstrated experience designing identity and access patterns for APIs (OAuth2/OIDC, JWT, scopes/claims, token handling).
A proven track record investigating and resolving API security incidents or exploitation attempts, with real analytical depth.
Strong architectural judgment — the ability to explain the reasoning behind a design decision, not just implement it.
Excellent written and verbal communication skills, comfortable working shoulder-to-shoulder with engineering, product, and security teams.
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
Experience that would be great to have
Experience building automation or CI/CD integration for API security (policy-as-code, OpenAPI-based checks, pipelines).
Experience in financial services or another highly regulated industry.
Relevant certifications (e.g., CISSP, CCSP, or API/security-specific credentials).
Experience mentoring engineers or leading cross-functional architecture reviews.
A background transitioning from hands-on security engineering into an architecture-level SME role.
How you'll work
This role is on-site Monday through Friday, based at our Alpharetta, GA cybersecurity tech hub where much of the API security team and engineering support is located. Fiserv considers in-person collaboration essential to onboarding, mentorship, and stronger productivity. We're open to other Fiserv cybersecurity locations (e.g., Berkeley Heights, NJ; Columbus, OH; Coral Springs, FL) for exceptional candidates.
Travel
Approximately 10% travel off-site or to other office locations is expected.
Sponsorship
You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered.
Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.
If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact AskHR.US@fiserv.com. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv's Disability Accommodation Policy for additional information.
Note to agencies: Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.
Warning about fake job posts: Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.
- Salary Range
- $128,000.00 - $216,000.00
These pay ranges apply to employees in New Jersey and New York. Pay ranges for employees in other states may differ.
It is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.
For incentive eligible associates, the successful candidate is eligible for an annual incentive opportunity which may be delivered as a mix of cash bonus and equity awards in the Company’s sole discretion.
Thank you for considering employment with Fiserv. Please
Apply using your legal name
Complete the step-by-step profile and attach your resume (either is acceptable, both are preferable).
Our commitment to Equal Opportunity
Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.
If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact AskHR.US@fiserv.com. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv’s Disability Accommodation Policy for additional information.
Note to agencies
Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.
Warning about fake job posts
Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.
