Application Security Engineer - Assistant Vice President
- Support threat modeling and design reviews across a broad and growing service portfolio.
- Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
- Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
- Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
- Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.
- Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
- Real understanding of attack patterns and exploitation techniques
- Familiar with OWASP Top 10 in practice
- API security experience with REST and GraphQL assessment
- Able to build and maintain security automation in Python, tooling that scales AppSec capacity
- Understanding of web application and API security
- Able to operate with autonomy in an environment still building its processes
- Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
- Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus
As published by greenhouse · 15 questions · 1 written answer
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location
Short answers (9)
- Preferred First Name
- What is your LinkedIn profile URL? If applicable, please share the link. optional
- What is your personal website or online portfolio? If applicable, please share the link. optional
- What is your full legal name?
- What is your desired base salary expectation? Please specify the amount and currency.
- What is your desired total annual compensation when considering an equity award? Please specify the amount and currency.
- If "Employee Referral" was selected for "How did you hear about this job?" please type the full name of the referring employee. If not, please type in "N/A".
- Are you subject to any form of Garden Leave or a Non-Compete Agreement? If yes, please provide detail below.
- What is your desired bonus expectation? Please specify the amount and currency.
Pick from a list (5)
- Are you legally eligible to work in the country where this role is located?
- How did you hear about this job?
- iCapital is an office-first culture, as such all employees are required to work in the office Monday-Thursday, with the flexibility to work remotely on Friday, depending on the department. Please review the job description before applying, to identify the specified location/s for the role.
- Do you currently require any type of visa sponsorship for employment?
- Do you require any type of visa sponsorship for employment in the future (i.e. student visa transfer to H1B, etc)?
Written answers (1)
- What forms of deferred compensation do you currently have (e.g., unpaid or deferred bonus, equity, or other long‑term incentive plans)? Please provide as much detail as possible. If no form of deferred compensation exists, please input N/A for this question.