VP, Application Security & Secure Design

Icapitalnetwork; Lisboa; Presencial; EUR 70 000 - 95 000; Tempo integral

Resumo da oferta

Icapitalnetwork in Lisboa, Portugal, is seeking a Senior Application Security practitioner to take ownership of Secure Design and contribute to shift-left security across the organization. You will work directly with the Head of AppSec to mature security programs and drive the design and threat modeling practice.

The role focuses on hands-on API security, offensive security, and building scalable security automation in Python, collaborating with developers on SAST/SCA remediation and CI/CD

Qualificações

• Hands-on experience across secure design, threat modeling, API security, and offensive security.
• Experience with penetration testing and API exploitation patterns.

Responsabilidades

• Define methodology, review standards, and sign-off criteria for Secure Design and Threat Modeling.
• Drive shift-left security initiatives within the development lifecycle through design reviews, developer enablement, and security gating in CI/CD.
• Own API security as a discipline.
• Support offensive security initiatives.
• Build and maintain security automation in Python to scale AppSec capacity.
• Collaborate with developers on SAST and SCA remediation, scan optimization, and reducing friction in security feedback.
• Contribute to AI-assisted security pipelines with defined escalation paths and accountability structures for vulnerability management.

Conhecimentos

Secure design

Threat modeling

API security

Offensive security

CI/CD security

Ferramentas

Python

Descrição da oferta de emprego

Icapitalnetwork in Lisboa, Portugal, is seeking a Senior Application Security practitioner to take ownership of Secure Design and contribute to shift-left security across the organization. You will work directly with the Head of AppSec to mature security programs and drive the design and threat modeling practice.

The role focuses on hands-on API security, offensive security, and building scalable security automation in Python, collaborating with developers on SAST/SCA remediation and CI/CD