API Security Engineer

CYBEXO INC.® Accredited by Better Business Bureau Central Ontario. Registered TM in the US.; New York (NY); On-site; USD 160,000 - 260,000; Full time

Benefits offered by this job

Competitive compensation and equity opportunity

Medical, dental, and vision coverage

401(k) plan

Generous PTO and paid holidays

Paid parental leave

Job summary

A leading cybersecurity firm is seeking an experienced API Security Engineer in New York, NY. You will secure authentication flows and APIs while collaborating with Engineering and Compliance teams. Candidates should have 5+ years in application security and possess a strong understanding of web security, API risks, and modern authentication patterns. The position offers a competitive salary, medical benefits, and generous PTO.

Qualifications

• 5+ years in application security, product security, or backend security engineering.
• Strong understanding of web security (OWASP), API risks, and modern auth patterns.
• Experience with security tooling and automation in CI/CD pipelines.
• Ability to communicate risks clearly to engineers and non-technical stakeholders.
• Bonus: experience in privacy/security compliance environments.

Responsibilities

• Design and implement secure authentication/authorization across services.
• Run threat models and security reviews for new features and integrations.
• Build security automation: SAST/DAST, dependency scanning, secrets management.
• Partner with incident response and post-incident hardening efforts.
• Support audit readiness with evidence-friendly engineering practices.

Skills

API Design

CI/CD

SOC 2

Privacy & Compliance

Job description

CYBEXO Inc. • Full Time • Engineering Division — Backend Engineering

API Security Engineer

New York, NY, United States • Posted on Oct 06, 2025

Security and trust are foundational to NexaGuard. As API Security Engineer, you’ll secure our auth flows, APIs, and data access patterns, partnering closely with Engineering and Compliance to strengthen our platform posture.

Responsibilities

• Design and implement secure authentication/authorization across services (RBAC/ABAC, JWT/OAuth patterns).
• Run threat models and security reviews for new features and integrations.
• Build security automation: SAST/DAST, dependency scanning, secrets management, CI/CD gates.
• Partner with incident response and post-incident hardening efforts.
• Support audit readiness (e.g., SOC 2-style controls) with evidence-friendly engineering practices.

Requirements

• 5+ years in application security, product security, or backend security engineering.
• Strong understanding of web security (OWASP), API risks, and modern auth patterns.
• Experience with security tooling and automation in CI/CD pipelines.
• Ability to communicate risks clearly to engineers and non-technical stakeholders.
• Bonus: experience in privacy/security compliance environments.

Benefits

• Salary Range: $160,000 – $260,000
• Competitive compensation and equity opportunity.
• Medical, dental, and vision coverage.
• 401(k) plan.
• Generous PTO and paid holidays.
• Paid parental leave.

Skills

• API Design
• CI/CD
• SOC 2
• Privacy & Compliance

CYBEXO is an equal opportunity employer. Candidate information is processed for recruiting purposes and handled securely.