VP of Application Security & Secure Design

iCapital Network; Lisboa; Híbrido; EUR 120 000 - 180 000; Tempo integral

Resumo da oferta

iCapital Network in Lisbon seeks an Application Security Engineer - Vice President to own secure design practices and drive shift-left security across the org.

You will lead API security efforts, work with developers on SAST/SCA remediation, and build scalable security automation in Python. The role requires deep expertise in threat modeling, OWASP Top 10, and cloud-native environments, with strong collaboration across engineering and product teams.

Qualificações

• Hands-on experience across secure design, threat modeling, API security, and offensive security.
• Penetration testing experience and solid understanding of real-world attack patterns.
• OWASP Top 10 familiarity in practice.
• API security depth with REST and GraphQL APIs.
• Proficiency in Python, able to build automation tools.
• Experience in shift-left programs: security in CI/CD and developer enablement.
• Comfort reading code across languages and working with engineering teams.
• Exposure to AI-assisted security tooling or LLM security is a differentiator.
• Developer background; fluency in Ruby, Python, Scala is a plus.

Responsabilidades

• Help build and mature the Secure Design and Threat Modeling program, defining methodology and review standards.
• Drive shift-left security initiatives and embed security earlier in the development lifecycle.
• Own API security as a discipline and lead related initiatives.
• Support offensive security activities and vulnerability management.
• Build and maintain security automation in Python and scalable tooling.
• Collaborate with developers on SAST/SCA remediation and feedback loop optimization.
• Contribute to AI-assisted security pipelines and establish escalation paths.

Conhecimentos

Secure design

Threat modeling

API security

Offensive security

Penetration testing

OWASP Top 10

CI/CD security

Python

Cloud-native

Architecture depth

Ruby

Scala

Ferramentas

SAST tooling

SCA tooling

Descrição da oferta de emprego

iCapital Network in Lisbon seeks an Application Security Engineer - Vice President to own secure design practices and drive shift-left security across the org.

You will lead API security efforts, work with developers on SAST/SCA remediation, and build scalable security automation in Python. The role requires deep expertise in threat modeling, OWASP Top 10, and cloud-native environments, with strong collaboration across engineering and product teams.