Application Security Engineer - Assistant Vice President

iCapital; Salt Lake City (UT); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Retirement plan

Health insurance

Dental insurance

Vision insurance

Telemedicine

Mental health support

Parental leave

Unlimited PTO

Job summary

iCapital is seeking an hands-on Application Security Engineer to join a small, high-impact team in Salt Lake City. You will work with the Head of AppSec on secure design, API security, and developer enablement.

The role involves threat modeling, CI/CD security, SAST/SCA remediation, and building Python automation to scale AppSec workflows. Office-based with some remote flexibility, you will collaborate with engineers to improve security across REST and GraphQL APIs.

Qualifications

• Hands-on experience in secure design and threat modeling
• Experience with API security, SAST/SCA workflows
• Familiarity with OWASP Top 10 in practice
• API security assessment for REST and GraphQL
• Ability to build security automation in Python

Responsibilities

• Support threat modeling and design reviews across services
• Support shift-left security in CI/CD, provide developer guidance, remediation workflows
• Contribute to API security across the organization
• Write Python automation to scale AppSec capacity
• Remediate SAST and SCA findings with developers and reduce false positives

Skills

Hands-on AppSec

Threat modeling

API security

SAST/SCA

Python automation

Security automation

Web app security

Autonomy

DevSecOps

Tools

Python

Job description

Application Security Engineer - Assistant Vice President

Salt Lake City, Utah, United States

About the Role

ICapital is looking for a hands‑on Application Security practitioner to join a small, high‑impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.

Responsibilities

• Support threat modeling and design reviews across a broad and growing service portfolio.
• Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
• Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
• Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
• Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.

Qualifications

• Hands‑on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
• Real understanding of attack patterns and exploitation techniques
• Familiar with OWASP Top 10 in practice
• API security experience with REST and GraphQL assessment
• Able to build and maintain security automation in Python, tooling that scales AppSec capacity
• Understanding of web application and API security
• Able to operate with autonomy in an environment still building its processes
• Relevant certifications, cloud‑native environment experience and exposure to AI/LLM security are a plus
• Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus

The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full‑time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday‑Thursday, with the flexibility to work remotely on Friday.

iCapital is proud to be an Equal Employment Opportunity and Aff…

iCapital Voluntary Self‑Identification Questions [U.S. Only]

Candidates are invited to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in iCapital Network ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Voluntary Self-Identification of Disability

Why are you being asked to complete this?

The law requires us to provide equal employment opportunity to qualified people with disabilities. We request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake.

Completing this form is voluntary. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability.

Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema

This survey should take about 5 minutes to complete.

Voluntary Self-Identification: What is your Gender? Select...

Voluntary Self-Identification: Are you Hispanic / Latino? Select...

Voluntary Self-Identification: Please identify your race if not Hispanic / Latino Select...

Voluntary Self-Identification: What is your veteran status? Select...

Voluntary Self-Identification: What is your disability status? Select...