Vice President, AppSec & Secure Design (Hybrid)

iCapital Network, Inc.; Lisboa; Híbrido; EUR 120 000 - 180 000; Tempo integral

Resumo da oferta

iCapital Network, Inc. is seeking an experienced Application Security Engineer - Vice President to own and shape Secure Design strategies.

You will partner with the Head of AppSec to drive shift-left security, threat modeling, and API security across the development lifecycle. You’ll lead design reviews, enable developers, and contribute to automation in Python while coordinating vulnerability management and security gating in CI/CD.

Qualificações

• Hands-on experience across secure design, threat modeling, API security, and offensive security.
• Offensive security capability with penetration testing experience and solid understanding of real-world attack and API exploitation patterns.
• Deep familiarity with OWASP Top 10 in practice.
• API security depth, experience assessing REST and GraphQL APIs.
• Python proficiency, comfortable building automation tools that others will depend on.
• Experience in shift-left programs: security in CI/CD, developer enablement, design review processes.
• Understanding of web application and API security.
• Comfortable reading code across languages and engaging with engineering teams at technical depth.
• Familiarity with cloud-native environments and attack surface management.

Responsabilidades

• Help build and mature the Secure Design and Threat Modeling program by defining methodology, review standards, and sign-off criteria across the organization
• Drive shift-left security initiatives, embedding security earlier in the development lifecycle through design reviews, developer enablement, and security gating in CI/CD
• Own API security as a discipline
• Support offensive security initiatives
• Build and maintain security automation in Python, tooling that scales AppSec capacity
• Work directly with developers on SAST and SCA remediation, scan optimization, and reducing friction in the security feedback loop
• Contribute to AI-assisted security pipelines; define escalation paths, SLAs, and accountability structures for vulnerability management

Conhecimentos

Threat modeling

API security

Penetration testing

Python

CI/CD security

REST/GraphQL

OWASP Top 10

Cloud-native

Security automation

Ruby/Scala familiarity

Ferramentas

SAST tooling

SCA tooling

CI/CD tooling

Automation scripts (Python)

Descrição da oferta de emprego

iCapital Network, Inc. is seeking an experienced Application Security Engineer - Vice President to own and shape Secure Design strategies.

You will partner with the Head of AppSec to drive shift-left security, threat modeling, and API security across the development lifecycle. You’ll lead design reviews, enable developers, and contribute to automation in Python while coordinating vulnerability management and security gating in CI/CD.