Walk me through how you would design a secure REST API for a Java-based application handling sensitive personnel data at Athenix Solutions Group.