Security Engineer IV - API/Cloud Security

This job posting is anticipated to remain open for 30 days, from 31-Aug-2026. The posting may close early due to the volume of applicants.

Team Overview:

Join our team as a Security Engineer IV and contribute to the safeguarding of our information system resources and assets. We're seeking a team player with a positive attitude, drive and the ability to collaborate closely with our security team. In this role, you'll be responsible for ensuring that our security systems align with Information Security policies and standards while supporting our firm's business objectives.

What You'll Do

• Perform administration of API Security, Cloud and SaaS Security Posture management, AI security tooling and other firm platforms as needed
• Participate in troubleshooting efforts to resolve day to day issues
• Involvement in Agile methodologies to build out our security platforms
• Find gaps in security controls and be able to recommend possible resolutions
• Participate in daily operational work that comes with large enterprise networks
• For some functions, there may be requirements for on-call work outside normal business hours and scheduled tasks occurring outside business hours
• Provide technical leadership and complete complex system level assignments
• Design, implement, and support API security controls across enterprise applications, cloud services, and third-party integrations
• Lead investigations and remediation efforts for API-related security incidents, vulnerabilities, and compliance findings
• Analyze API traffic patterns and security telemetry to identify anomalous behavior, abuse, and potential attacks
• Provide technical guidance and mentoring to junior engineers and security analysts on API security best practices and secure coding principles

Current Internal home-based associates please note: Even as a hybrid posted role you are eligible to apply and, if selected, you may retain your home-based status. However future business or regulatory needs may require on-site work and some roles may carry a preference for hybrid presence.

What Experience You'll Need

• Bachelor's degree (preferred) in Computer Science, Management Information Systems, related field or related work experience
• 5+ years of experience in cybersecurity, application security, API security, or related engineering disciplines
• Knowledge and understanding of security systems, risks, concepts and terminology.
• Hands on experience with the security aspects of critical technologies (e.g., Linux, UNIX, Proofpoint, Windows, Web, LDAP, DBMS, Network, Firewalls, IDS/IPS, Data Loss Prevention (DLP), API Security, DNS, Vulnerability Assessment Tools)
• An intermediate to advanced understanding of at least one of the following environments; API Security, CSPM, SSPM or AI Security is highly preferred
• An intermediate understanding of Azure Cloud environments, controls and architecture is preferred.
• Comprehension of basic scripting languages (e.g., shell, PERL, Visual Basic, PHP, Python) is preferred.
• Ability to diagnose security, network, and system issues
• Understand infrastructure architecture – networks, security tools, operating systems and provides input to leaders about the impact of these components
• Strong understanding of API security risks, including OWASP API Security Top 10 vulnerabilities and modern attack techniques
• Ability to effectively communicate technical risks and remediation recommendations to both technical and non-technical stakeholders
• Experience working with API Security tooling in containerized environments

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.\

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Edward Jones is prohibited from hiring individuals with certain specified criminal history as set forth in Section 3(a)(39) and 15(b)(4) and Rule 17a-3(a)(12) of the Securities and Exchange Act of 1934, and conducts background reviews consistent with FINRA Rule 3110(e). A copy of a notice regarding the provisions of the Los Angeles County Fair Chance Ordinance is available at: dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf.