Secure API development Engineer

Job Description

<p><b>Inclusion without Exception:</b></p><p><br></p><p>Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.</p><p><br></p><p><b>About TCS:</b></p><p>TCS is an IT services, consulting, and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 55 years. Its consulting-led, cognitive-powered portfolio of business, technology, and engineering services and solutions is delivered through its unique Location Independent Agile™ delivery model, recognized as a benchmark of excellence in software development. A part of the Tata group, India's largest multinational business group, TCS operates in 55 countries and employs over 607,000 highly skilled individuals, including more than 10,000 in Canada. The company generated consolidated revenues of US $ 30 billion in the fiscal year ended March 31, 2025 (BS1) and is listed on the BSE and the NSE in India. TCS' proactive stance on climate change and award-winning work with communities across the world have earned it a place in leading sustainability indices such as the MSCI Global Sustainability Index and the FTSE4Good Emerging Index.</p><p><br></p><p><b>Skills and Responsibilities:</b></p><p> </p><p> •Secure API development Design and develop RESTful APIs and integrations with strong authentication, authorization, and data protection measures.</p><p> •Work with PostgreSQL and other RDBMS to query, optimize, and secure data structures against injection attacks, data leakage, and unauthorized access.</p><p> •Contribute to system architecture with Security by Design, including threat modeling and secure design reviews at the planning stage.</p><p> •Write scripts to automate security scans, compliance checks, and reduce manual effort in security monitoring and deployment workflows.</p><p> •Proficiency in Python, JavaScript, Java, or Go with a focus on secure coding standards (e.g., OWASP Top 10 mitigation).</p><p> •Implement CICD pipelines with integrated SAST, DAST, dependency scanning, and secrets management for secure deployments.</p><p> •Deep application of secure coding frameworks, vulnerability prevention, and industry best practices (OWASP, SANS).</p><p> •Strong problem-solving and debugging skills for both functional and security-related issues in dev, test, and prod environments.</p><p> •Collaborate closely with developers, operations, and security teams to embed a culture of security across all cross-functional work.</p><p> </p><p> •Primary Skills-Secure coding (OWASP Top 10, SANS CWE) API security (OAuth2, JWT, input validation) CICD security integration (SAST, DAST, dependency scanning) Programming in Python, JavaScript, Java, or Go PostgreSQL database security Threat modeling amp secure architecture reviews Security automation scripting.</p><p> </p><p> •Good to Have-Cloud security (AWS GCP Azure) Container security (DockerK8s, image scanning) IaC security (Terraform, Ansible) Security compliance (SOC 2, ISO 27001) </p><p> •Ideal Experience Range 6-9 years </p><p> •Total experience in software development and DevOps, with at least 2 - 3 years </p><p> •Hands-on security exposure (secure coding, pipeline security, API security, threat modeling).</p><p><br></p><p>Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodations during the recruitment and selection process, please inform Human Resources.</p><p><br></p><p>Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period. We invite you to continue to apply for other opportunities that match your profile.</p>