API Security Engineer Careers at Fiserv: Remote Cybersecurity Skills, Salary, Resume Tips & How to Get Hired

Opportunity Snapshot

About Fiserv Careers

Fiserv is a global fintech and payments company supporting financial institutions, merchants, corporations, and consumers through digital payment, banking, commerce, and financial technology solutions. Cybersecurity roles at companies like Fiserv often focus on protecting high-volume systems, reducing risk, improving secure engineering practices, and supporting reliable digital transactions.

For current openings, always check the official Fiserv careers website before applying through any older job article.

Official Fiserv Careers Page: Fiserv Careers

Fiserv Technology Jobs: View Fiserv Technology Roles

What an API Security Engineer Does

An API Security Engineer protects application programming interfaces from abuse, misconfiguration, broken authorization, data exposure, injection attacks, bot activity, weak authentication, excessive access, and other risks that can affect modern digital platforms.

In fintech, this work may include secure API design reviews, runtime protection, API discovery, telemetry analysis, threat detection, incident response, security automation, and collaboration with product, platform, application security, cloud, and engineering teams.

Common Responsibilities

• Implement and tune API runtime protection controls.
• Analyze API security events, telemetry, and threat signals.
• Reduce false positives and prioritize high-risk findings.
• Support secure API design using authentication, authorization, validation, and least-privilege principles.
• Work with OAuth2, OpenID Connect, JWT, scopes, claims, tokens, and session security.
• Support API gateways, WAF, WAAP, service mesh, ingress, or specialized API security tools.
• Build automation for API security testing, monitoring, ticketing, and CI/CD workflows.
• Partner with product, platform, application security, and incident response teams.
• Document controls, exceptions, findings, and remediation actions.
• Align API security work with OWASP API Security Top 10, NIST, ISO 27001, PCI DSS, and related frameworks.

Skills Employers Want

• API security architecture
• Application security
• OWASP API Security Top 10
• OAuth2 and OpenID Connect
• JWT and token security
• API gateways and service mesh
• WAF and WAAP platforms
• Threat detection and incident response
• Security event analysis
• Python, Bash, or automation scripting
• CI/CD security integration
• SAST, DAST, API testing, and secrets scanning
• Cloud security fundamentals
• NIST, ISO 27001, PCI DSS, and audit readiness
• Security documentation and engineering collaboration

Salary Context

API Security Engineer compensation varies by company, location, seniority, fintech experience, on-call expectations, cloud exposure, and depth of application security expertise. Recent API security roles connected to Fiserv have appeared with salary ranges around $110,000 to $186,000, while broader senior cyber engineering roles may pay more depending on scope.

• Application Security Engineer: $105,000–$145,000
• API Security Engineer: $120,000–$165,000
• Senior API Security Engineer: $145,000–$190,000+
• Principal Security Engineer: $180,000–$240,000+

Higher-paying roles usually require hands-on API security tooling, strong authentication and authorization knowledge, fintech or regulated industry experience, incident response awareness, and the ability to work closely with engineering teams.

Resume Tips for API Security Engineer Jobs

• Lead with API security, application security, threat detection, cloud security, and DevSecOps experience.
• Mention specific tools or areas such as API gateways, WAF, WAAP, OAuth, OIDC, JWT, SAST, DAST, secrets scanning, and CI/CD security.
• Show measurable impact, such as reduced false positives, improved detection coverage, faster remediation, fewer exposed endpoints, or stronger control adoption.
• Include regulated industry experience if you have worked in fintech, banking, payments, healthcare, insurance, or enterprise security.
• Highlight collaboration with engineers, product teams, incident response, platform teams, and security operations.
• Use project-based bullets instead of only listing tools.
• Keep your resume clear, technical, and ATS-friendly.

Interview Preparation

For API Security Engineer interviews, employers usually test your understanding of real API risks, secure design, runtime controls, automation, and practical incident response.

• What are the most common API security risks?
• How would you detect broken object level authorization?
• How do OAuth2, OIDC, and JWT work together?
• How would you protect a public API used by mobile apps?
• How do you reduce false positives in API security alerts?
• What controls would you apply at an API gateway?
• How would you automate API security checks in CI/CD?
• How do you investigate suspicious API traffic?
• How would you prioritize API vulnerabilities across many services?
• How do you work with engineers without slowing product delivery?

Similar Job Titles to Search

• API Security Engineer
• Application Security Engineer
• DevSecOps Engineer
• Cloud Security Engineer
• Product Security Engineer
• Cyber Security Engineer
• Security Automation Engineer
• Threat Detection Engineer
• Web Application Security Engineer
• Security Platform Engineer