API Security Engineer

About Sequester

Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.

About this role

You will secure Sequester's outward-facing APIs???auth flows, upload endpoints, webhooks???against abuse, injection, and broken access control at scale.

What you will do

• Review and test API designs for authN/authZ gaps and mass-assignment risks
• Implement or recommend WAF rules, rate limits, and bot detection for public routes
• Run regular authenticated and unauthenticated API fuzzing in staging
• Partner with backend teams on OAuth/session hardening and audit logging
• Track API security findings to closure with release-blocking policy for criticals

What we are looking for

• API security specialization with Burp, Postman collections, or custom fuzzers
• Deep understanding of OWASP API Security Top 10
• Experience securing high-volume media upload endpoints is a plus
• Clear communication with backend engineers who own the fixes

Location

Remote-friendly. We hire globally and collaborate async-first across time zones.