A new security manager finds security problems lurking virtually everywhere at his new company. Security is a good place to start at the core of what this company does: writing software that is made available to customers via the cloud and Web browsers. The company’s API is what is called a REST (representational state transfer) API. Strong authentication, authorization, encryption and data validation are just some of the security controls that need to be in place, “Mathias Thurman” says Thurman. He recommends hiring a trusted third party to review code and review developed code.”]
Source: https://www.csoonline.com/article/2854618/what-to-do-when-starting-a-new-security-job.html