Encora Inc.

Senior API Security Engineer

Encora Inc.  •  Kuala Lumpur, MY (Onsite)  •  4 hours ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

Key Responsibilities

  • API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass

Assignment) that traditional firewalls miss.

  • Authentication & Authorization: Design and validate OAuth2, OIDC, and JWT

implementations to ensure users can only access their own data.

  • Attack Simulation: Script automated attacks against the API Gateway to test rate limiting

and fraud detection rules.

  • Gateway Hardening: Work with the Platform team to configure the API Gateway (Kong,

or Azure API Gateway) for maximum security.

  • Auth & Partner Integration: Deliver new security design patterns and components for

authentication, authorization, SSO, MFA, and Partner security. Standardize how we

consume external APIs (Open Banking) and how we secure our own exposed endpoints.

Technical Requirements:

  • Strong scripting skills (Python) to automate API attacks.
  • Expertise in REST and GraphQL security.
  • Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) flows.
  • Experience with API Security tools (Postman, Burp Suite, 42Crunch).
Encora Inc.

About Encora Inc.

Encora is a global digital engineering company built for a new era of AI-powered businesses. Forged in Silicon Valley, we grew up serving digital natives who demanded speed, scale, and flawless experiences. Today, we bring that same DNA to enterprises worldwide, enabling speed and hyper-adaptability, moving them further along their quest to become more composable and agile.

With two decades at the convergence of Cloud, Data, and AI, we help organizations move beyond rigid, legacy models to become composable enterprises, through adaptive systems designed to sense change and reconfigure in real time.

More than 9,500 engineers, designers, and domain experts across the Americas, Europe, India, and Southeast Asia give Encora the ability to combine nearshore agility with global scale. Backed by Advent International and Warburg Pincus, we deliver innovation acceleration and modernization across industries, powered by Encora AIVA™, our orchestration platform for AI-native engineering.

We believe the future won’t be built by humans or machines alone, but by human creativity amplified by limitless machine intelligence. At Encora, that’s how we help our clients build fast and adapt faster.

Industry
IT & Software
Company Size
5,001-10,000 employees
Headquarters
Santa Clara, California
Year Founded
Unknown
Social Media