Senior AppSec Engineer: Shift-Left & API Security

Icapital; Viseu; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Equity

Paid time off

Job summary

Icapital is seeking a Senior Application Security practitioner to take ownership of the Secure Design program and drive shift-left security across the fintech focused organization. You will work closely with the Head of App Sec to mature threat modeling, API security, and automation initiatives.

You will build security tooling in Python, collaborate with developers on SAST/SCA remediation, and help establish escalation paths, SLAs, and vulnerability management processes in a fast-paced

Qualifications

• Hands-on security design, threat modeling and API security.
• Experience with REST/GraphQL API security assessments.
• Proficiency in Python for building automation tools.

Responsibilities

• Build and mature Secure Design and Threat Modeling program across the organization.
• Drive shift-left security by embedding security early in the Dev lifecycle via design reviews, enablement and CI/CD gating.
• Own API security as a discipline and lead remediation efforts.
• Support offensive security initiatives and security automation in Python.
• Collaborate with developers on SAST/SCA remediation and optimize security feedback loop.

Skills

Secure design

Threat modeling

API security

Offensive security

Python automation

CI/CD security

SAST remediation

SCA remediation

Threat detection

Job description

Icapital is seeking a Senior Application Security practitioner to take ownership of the Secure Design program and drive shift-left security across the fintech focused organization. You will work closely with the Head of App Sec to mature threat modeling, API security, and automation initiatives.

You will build security tooling in Python, collaborate with developers on SAST/SCA remediation, and help establish escalation paths, SLAs, and vulnerability management processes in a fast-paced