Skip to content
Cyber Courses
All roles

Junior

API Security Engineer

API security engineers make sure the services behind a product can't be abused. This path focuses on how APIs are called, authenticated and broken, so you can both test and defend them.

Skills this role needs

The capstone skills for this role. Each folds in the prerequisites it depends on.

HTTP & APIs

  • Use HTTP request headers

    Includes

    • Make HTTP requests

Broken access control

  • Exploit an IDOR

    Includes

    • Make HTTP requests
    • Read from a REST API

Injection

  • Exploit SQL injection

    Includes

    • Make HTTP requests
    • Write SQL queries
    • Detect SQL injection

Your path

The lessons that close your gaps, in order. Mastered skills are skipped.

  1. 1Anatomy of an HTTP requestWeb foundations for security · Make HTTP requests Start
  2. 2Headers and authenticated requestsWeb foundations for security · Use HTTP request headers, Read from a REST API Start

Your readiness

0%

Log in to track your readiness

What the job involves

  • Understand how clients authenticate to and call an API.
  • Spot broken object-level authorisation (IDOR) and injection.
  • Validate fixes by re-testing the exact path.