Application Security Engineer - Vice President

Icapitalnetwork; Lisboa; Presencial; EUR 70 000 - 95 000; Tempo integral

Resumo da oferta

Icapitalnetwork in Lisboa, Portugal, is seeking a Senior Application Security practitioner to take ownership of Secure Design and contribute to shift-left security across the organization. You will work directly with the Head of AppSec to mature security programs and drive the design and threat modeling practice.

The role focuses on hands-on API security, offensive security, and building scalable security automation in Python, collaborating with developers on SAST/SCA remediation and CI/CD

Qualificações

• Hands-on experience across secure design, threat modeling, API security, and offensive security.
• Experience with penetration testing and API exploitation patterns.

Responsabilidades

• Define methodology, review standards, and sign-off criteria for Secure Design and Threat Modeling.
• Drive shift-left security initiatives within the development lifecycle through design reviews, developer enablement, and security gating in CI/CD.
• Own API security as a discipline.
• Support offensive security initiatives.
• Build and maintain security automation in Python to scale AppSec capacity.
• Collaborate with developers on SAST and SCA remediation, scan optimization, and reducing friction in security feedback.
• Contribute to AI-assisted security pipelines with defined escalation paths and accountability structures for vulnerability management.

Conhecimentos

Secure design

Threat modeling

API security

Offensive security

CI/CD security

Ferramentas

Python

Descrição da oferta de emprego

About the role:

We are looking for a technically strong Senior Application Security practitioner ready to take on real ownership. You will work directly with the Head of AppSec, contributing to the Secure Design practice and helping drive shift-left security across the organization.

What You'll Do

• Help build and mature the Secure Design and Threat Modeling program by defining methodology, review standards, and sign-off criteria across the organization
• Drive shift-left security initiatives, embedding security earlier in the development lifecycle through design reviews, developer enablement, and security gating in CI/CD
• Own API security as a discipline
• Support offensive security initiatives
• Build and maintain security automation in Python, tooling that scales AppSec capacity
• Work directly with developers on SAST and SCA remediation, scan optimization, and reducing friction in the security feedback loop
• Contribute to AI-assisted security pipelines; define escalation paths, SLAs, and accountability structures for vulnerability management

What We're Looking For

• Hands-on experience across secure design, threat modeling, API security, and offensive security
• Offensive security capability with penetration testing experience and solid understanding of real-world attack and API exploitation patterns