Full-Time
Lead Information Security Consultant
API Security & Governance
Updated on 9/12/2026
U.S. Bank
10,001+ employees
Offers banking, loans, mortgages, investment advisory
Compensation Overview
$126.8k - $149.2k/yr
Hopkins, MN, USA + 3 more
More locations: Chicago, IL, USA | Irving, TX, USA | Atlanta, GA, USA
Hybrid
Three or more days per week at a U.S. Bank location are required.
 Cybersecurity (1) |
|---|
Get referred to U.S. Bank
See people who can refer or advise you
- 10+ years of experience in Information Security, Application Security, API Security, Security Architecture, or a related field.
- Deep expertise in API Security and Application Security principles, frameworks, and best practices.
- Experience developing, implementing, and enforcing security standards, governance models, controls, and policies.
- Strong understanding of secure API design, architecture, authentication, authorization, and risk management.
- Experience performing threat modeling, security reviews, architecture assessments, and risk evaluations.
- Proven ability to assess and improve an organization's API security posture.
- Experience partnering with security, risk, architecture, business, and engineering stakeholders across large enterprise environments.
- Strong understanding of security frameworks, regulatory requirements, and compliance considerations.
- Prior hands-on technical experience with application development, APIs, or API technologies.
- Ability to influence decision-making and drive security initiatives without direct authority.
- Lead the development, maintenance, and evolution of enterprise API security standards, controls, and governance practices.
- Assess and improve the bank's overall API security posture through security reviews, risk assessments, and control evaluations.
- Provide guidance on secure API architecture, authentication, authorization, encryption, threat protection, monitoring, and lifecycle management.
- Partner with Information Security, Technology Risk, Enterprise Architecture, and engineering teams to identify and mitigate API security risks.
- Conduct architecture reviews, threat modeling exercises, and security assessments for API-enabled applications and platforms.
- Define and promote API security best practices, reusable security patterns, and governance frameworks across the enterprise.
- Influence technology teams to adopt secure-by-design API development and implementation practices.
- Support regulatory, compliance, audit, and risk management activities related to API and Application Security.
- Serve as a trusted advisor and subject matter expert for API Security and Application Security initiatives.
- Stay current on emerging API threats, vulnerabilities, technologies, and industry best practices to continuously improve enterprise security capabilities.
- Collaborate with platform teams supporting Apigee, GraphQL, AI APIs, AWS API Gateway, and other API technologies to ensure security requirements are consistently applied.
- Drive alignment between business objectives, security requirements, and enterprise technology standards.
- Experience with API gateway technologies such as Apigee, AWS API Gateway, GraphQL gateways, Kong, MuleSoft, or similar platforms.
- Knowledge of the OWASP API Security Top 10 and common API attack vectors.
- Experience with OAuth 2.0, OpenID Connect, JSON Web Tokens, mutual Transport Layer Security, API threat protection, and modern authentication frameworks.
- Experience supporting API governance programs within financial services or other highly regulated industries.
- Exposure to API penetration testing, security testing methodologies, and vulnerability management practices.
- Knowledge of cloud-native application architectures, microservices, and distributed systems.
- Experience developing enterprise security reference architectures and reusable security patterns.
- Security certifications such as CISSP, CSSLP, GWAPT, or equivalent.
- Experience securing modern API ecosystems, including AI APIs and emerging API technologies.
U.S. Bank provides a wide range of banking and financial services for individuals, small businesses, and large corporations, including checking, savings, loans, mortgages, and investment advisory. Its products run through a network of physical branches and digital tools like a mobile app, enabling customers to open accounts, transfer funds, apply for loans, invest, and receive guidance. Revenue comes mainly from interest on loans, service fees, and advisory fees. The bank differentiates itself with a broad product lineup, accessibility, and inclusion, aiming to make banking easier and more accessible for people across the United States.
Company Size
10,001+
Company Stage
IPO
Headquarters
Minneapolis, Minnesota
Founded
1863
Get referred to U.S. Bank
See people who can refer or advise you
Simplify's Take
What believers are saying
- Second-quarter 2026 revenue hit a record $7.7 billion, with 18.7% ROTCE.
- Fee income rose 13.2% in Q2 2026, boosted by BTIG's first-month $98 million.
- More than 50 new bankers joined in 2026, accelerating growth in Texas, Arizona, Florida, Georgia.
What critics are saying
- Mortgage servicing rights stayed at $1.58 billion; Fed stress tests flagged 5%-13% valuation declines.
- CFPB and OCC penalties over ReliaCard froze benefits case still scar leadership credibility.
- BTIG integration must deliver $200 million quarterly by late 2026 or revenue momentum stalls.
What makes U.S. Bank unique
- BTIG added institutional sales, trading, research, and M&A advisory in June 2026.
- U.S. Bank is expanding business banking into Florida and Georgia outside its branch footprint.
- Gunjan Kedia is diversifying revenue beyond lending, targeting capital markets above 10% of revenue.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Retirement Plan
Paid Vacation
Paid Holidays
Adoption Assistance
Paid Sick Leave
Company News
U.S. bank quarterly net income surged to $90.1 billion in the second quarter of 2026, up 12% from the previous quarter, according to Whalen Global Advisors' latest report. Noninterest income rose $5.5 billion, or 6.1%, driven by higher trading revenue and fee income linked to the AI stock boom. However, Christopher Whalen, WGA Chairman, warns that margin lending and borrowing tied to securities transactions is growing faster than loans to non-depository financial institutions. The report also highlights potential vulnerabilities in mortgage finance, noting that bank-owned mortgage servicing rights have been significantly overvalued since late 2023. Whalen argues that current practices enable banks to lend against mortgage servicing rights at potentially unrealisable valuations, creating risks as credit conditions tighten.
Spire Inc. has secured a $400 million delayed draw senior unsecured term loan facility, the company announced on 1 September 2026. The credit agreement was established with a syndicate of banks led by Mizuho Bank and U.S. Bank National Association as joint lead arrangers and bookrunners. The facility allows up to four separate borrowings until the earliest of full utilisation, the fourth borrowing, or 1 December 2026. Pricing is set at Adjusted Term SOFR plus 0.80% per annum, with a 364-day maturity from the effective date. Proceeds will be used for general corporate purposes. The agreement includes standard covenants, including a consolidated capitalisation ratio requirement not exceeding 70% at each fiscal quarter-end. The delayed draw structure and short-term maturity suggest potential capital deployment or strategic activity ahead.
U.S. Bank is expanding its business banking division into Florida and Georgia for the first time, whilst accelerating growth in Texas and Arizona. The bank has added more than 50 customer-facing positions nationwide since the beginning of 2026, with further hiring expected. The expansion targets businesses with annual sales between $2.5 million and $50 million. Florida and Georgia represent U.S. Bank's first business banking presence in those states, forming part of its strategy to support clients beyond its traditional 26-state branch footprint. The bank has also expanded in Dallas, adding to its existing team there, and hired additional business bankers in Phoenix. The business banking division now includes more than 1,300 bankers providing deposit, lending, payments and treasury management solutions.
Universal Electronics has amended its credit agreement with lenders led by US Bank National Association. The revised deal, dated 21 August 2026, maintains the company's $60 million revolving credit facility and extends maturity to 30 September 2027. The agreement modifies financial covenants and borrowing base calculations. The borrowing base is set at 75% of eligible accounts receivable. SOFR borrowings carry a 3.00% margin. Notably, the amended agreement includes add-backs for restructuring expenses of up to $4 million in fiscal 2026 and $2 million in fiscal 2027, plus a $1.3 million loss on an abandoned California office lease. The changes suggest the company is undertaking restructuring whilst seeking operational flexibility. The agreement also references a sale of tariff refund claims to Jefferies Leveraged Credit Products dated 9 June 2026.
SAN JUAN CAPISTRANO, Calif., Aug. 20, 2026 -- The Ensign Group, Inc. , the parent company of the Ensign™ group of companies, which invest in and provide skilled nursing and senior living...