VP, Application Security & Secure Design

iCapital; Lisboa; Híbrido; EUR 90 000 - 140 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity in compensation

Healthcare and dental insurance

Generous PTO

Annual performance bonus

Resumo da oferta

iCapital is seeking a Senior Application Security practitioner to own and mature the Secure Design program and drive shift-left security across the organization. You will work closely with the Head of AppSec to define methodologies, reviews, and sign-off criteria.

You will embed security earlier in the lifecycle through design reviews, developer enablement, and CI/CD gating, owning API security and supporting offensive security initiatives.

Qualificações

• Hands-on focus on secure design and threat modeling across the org.
• Proficient in API security with REST/GraphQL, plus offensive security basics.
• Experience embedding security in the dev lifecycle and CI/CD gates.
• Familiarity with AI-assisted security tooling is a plus.

Responsabilidades

• Define and mature the Secure Design and Threat Modeling program with standards and sign-off criteria.
• Drive shift-left security initiatives, embedding security in the development lifecycle through design reviews and gating in CI/CD.
• Own API security as a discipline and lead SAST/SCA remediation with developers.
• Support offensive security initiatives and build scalable security automation in Python.

Conhecimentos

Secure design

Threat modeling

API security

Offensive security

CI/CD security

Python automation

APIs REST/GraphQL

Ruby/Python/Scala development

Descrição da oferta de emprego

iCapital is seeking a Senior Application Security practitioner to own and mature the Secure Design program and drive shift-left security across the organization. You will work closely with the Head of AppSec to define methodologies, reviews, and sign-off criteria.

You will embed security earlier in the lifecycle through design reviews, developer enablement, and CI/CD gating, owning API security and supporting offensive security initiatives.