Jobs and Careers

Technology Security Analyst (API)

Jacksonville, United Statesfull_timeVerifiedPosted 9 Oct 2025

💰 $144,670/yr($86,120/yr – $144,670/yr)

About the role

Job Description

We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?

NOTE:

1. Candidates located in FIS office locations in Jacksonville (FL), Milwaukee (WI), Atlanta (GA), and New York City (NY) will be required to work in a hybrid model (3 days in office per week).

2. Current and future sponsorship are not available for this position.

About the role:
As an IT Security Analyst with FIS, your skills will be put to the test on the front lines of cyber-crime. Information security is at the heart of fintech and you’ll help protect and secure highly-sensitive financial data for customers around the world.

About the Team:

The Appsec Architecture and Engineering is responsible for developing and maintaining policies and standards for the FIS API Security Program and collaborate with internal development teams to implement security controls in APIs, conducting secure design reviews and automates workflows to track and remediate API vulnerabilities.

The team identifies and addresses gaps in incumbent security tools (SAST, SCA, Container security), collaborates with vendors to address/enhance scanning coverage and define/refine the internal processes to ensure the efficiency and strengthen overall security program.

What you will be doing:

Develop and maintain policy and standards for FIS API security program.
Collaborate with internal development teams to build/advocate security controls in Application Programming Interface (API), and performing the secure design review of the APIs.
Assist in the security standards, and processes of SDLC to protect Application, APIs, and CI/CD.
Primarily responsible for API and Application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)
Manage the API runtime monitoring tool and work with vendor to tune/configure to provide the maximum but accurate coverage to FIS software.
Identify the gaps in SAST/SCA/Container/IAC and other tool’s rule/configuration and work with vendor to engineer them to provide the maximum scanning coverage to FIS software.
Crate software/automated workflows and collaborate with other stakeholders to integrate security tooling to track the API findings and work with development team to remediate them.
Collaborate with WAF team to define/modify the rules to protect the APIs.

What you bring:

Total 5+ years of hands-on professional software development and security experience, with a strong foundation in security practices and expertise in languages such as Java or C#.
Proven experience in API Security and Application security, including secure design reviews.
Collaborated closely with development teams to integrate security control and remediate vulnerabilities.
Collaborated with development team and DevOps team to integrate security tools and workflows into automated development environments.
Good understanding of SAST, SCA, IaC, and container security tools (e.g., Checkmarx One) working and tuning of such tools to maximize coverage and reduce false positives.
Strong knowledge of OWASP Top 10 and OWASP API Top 10, with the ability to identify, assess, and guide remediation of vulnerabilities through both manual and automated methods.
Excellent communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
Strong organizational and time management skills, with a track record of driving security initiatives across cross-functional teams in a remote or hybrid environment.