Application Security Engineer - Assistant Vice President
iCapital Network
$100,000 - $130,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
- Support threat modeling and design reviews across a broad and growing service portfolio.
- Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
- Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
- Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
- Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.
- Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
- Real understanding of attack patterns and exploitation techniques
- Familiar with OWASP Top 10 in practice
- API security experience with REST and GraphQL assessment
- Able to build and maintain security automation in Python, tooling that scales AppSec capacity
- Understanding of web application and API security
- Able to operate with autonomy in an environment still building its processes
- Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
- Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus
Benefits
- 401(k)
- paid time off
- stock options
- parental leave
- bonus
About this role
iCapital is building out its application security program and seeking a hands-on practitioner to work directly with the Head of AppSec on core defensive work. You'd split your time between threat modeling and design reviews across their service portfolio, collaborating with developers on SAST and SCA remediation, and assessing API security across REST and GraphQL implementations. A significant part of the role involves writing Python automation to scale the team's capacity—building triage tooling, finding pipelines, and security context enrichment so the AppSec function can operate more efficiently as the organization grows.
The ideal candidate has practical experience in secure design, threat modeling, API security, or offensive security work, with a solid grasp of attack patterns and OWASP Top 10 vulnerabilities. You should be comfortable operating with autonomy in an environment still maturing its processes, and able to shift between hands-on technical work and developer enablement. Prior development experience and fluency in Python, Ruby, or Scala are valuable, as is familiarity with cloud-native or AI/LLM security contexts.
The role is based in Salt Lake City and in-office Monday through Thursday, with Friday remote flexibility. Compensation ranges from $100,000 to $130,000 base salary, plus equity, performance bonus, matched retirement, and comprehensive health coverage including dental, vision, and mental health support.
How this employer is doing
solid
- Recently Raised Funding
In the news
How Much Did iCapital Network Raise? Funding & Key Investors, Clay
This role's local market on JobMinglr
Pay for this role
$100,000 to $130,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.