Cybersecurity Engineer at SquadMakers in New York, New York, United States

Job description

• We are seeking a Cybersecurity & Penetration Testing Specialist to ensure the security and resilience of our infrastructure and the solutions deployed for our clients. This role focuses on proactively identifying vulnerabilities, performing security assessments, and ensuring compliance with international data protection regulations.

Responsibilities

• Infrastructure Security
• Assess and secure customer cloud infrastructure and platform environments.
• Identify security risks in infrastructure architecture and propose remediation strategies.
• Ensure systems are resilient against cyberattacks, unauthorized access, and service disruption.
• Penetration Testing & Security Assessments
• Perform regular penetration tests on internal systems, cloud environments, and client-facing applications.
• Conduct vulnerability assessments and security audits.
• Simulate attack scenarios to evaluate system resilience.
• Application Security Analysis
• Analyze the security of web and API-based applications.
• Identify vulnerabilities such as those defined in the OWASP Top 10.
• Work with development teams to remediate security issues and improve secure coding practices.
• Threat Prevention & System Resilience
• Evaluate system defenses against hacking attempts, intrusion attacks, and exploitation techniques.
• Recommend security improvements to increase platform resilience and incident response readiness.
• Support the implementation of monitoring and detection mechanisms.
• Compliance & Data Protection
• Ensure compliance with GDPR and international data protection regulations.
• Verify that ApolloV2 systems and client solutions comply with European and US security and privacy standards.
• Conduct security reviews of systems handling sensitive athlete and medical data.
• Security Documentation & Reporting
• Produce detailed reports from penetration tests and vulnerability analyses.
• Maintain documentation on security practices, controls, and remediation processes.
• Provide security recommendations to technical and management teams.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field
• Minimum of 3 years of experience in a cybersecurity role
• Strong knowledge of cybersecurity principles, protocols, and technologies
• Experience with network and system security, intrusion detection, and vulnerability management
• Familiarity with industry compliance standards such as HIPAA, PCI, and GDPR
• Certifications such as OSCP, CEH, CISSP, or similar
• Experience performing red team / ethical hacking engagements
• Background in securing SaaS platforms
• Experience working with high-sensitivity data environments
• Penetration testing methodologies
• Vulnerability assessment and risk analysis
• Web application and API security
• Network security fundamentals
• Security architecture and infrastructure hardening
• GDPR
• Data protection and privacy frameworks in the EU and US
• Penetration testing tools (Burp Suite, Metasploit, Nmap, OWASP ZAP)
• Vulnerability scanners (Nessus, Qualys)
• Network monitoring and logging tools
• Security testing frameworks
• AWS, Azure, or Google Cloud
• Containerized environments (Docker, Kubernetes) is a plus
• Scripting or automation in Python, Bash, or similar
• Ability to analyze and understand application codebases and system architecture
• - Relevant certifications such as CISSP, CISM, or CEH are a plus

Skills

Required

• Penetration testing methodologies
• Web application and API security
• Network security fundamentals