Application Security Engineer - Assistant Vice President

Icapitalnetwork; Salt Lake City (UT); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Equity for all full-time employees

Annual performance bonus

Employer matched retirement plan

Comprehensive health benefits (health,

Dental - 100% employer-paid

Vision - 100% employer-paid

Telemedicine

Unlimited PTO

Parental leave

Job summary

iCapital seeks a hands-on Application Security practitioner to join a small, high-impact team building a modern AppSec program in Salt Lake City, UT. You will report to the Head of AppSec and collaborate with senior team members on secure design, API security, and developer enablement.

You will support threat modeling, CI/CD security, and remediation workflows, while writing Python automation to scale AppSec capacity and working closely with developers to remediate SAST/SCA findings across

Qualifications

• Hands-on experience across secure design, threat modeling, API security, or SAST/SCA programs.
• Understanding of attack patterns and exploitation techniques.
• Familiar with OWASP Top 10 in practice.
• API security experience with REST and GraphQL assessments.
• Ability to build and maintain security automation in Python.
• Understanding of web application and API security.
• Able to work autonomously in a developing processes environment.
• Certifications, cloud-native experience, and AI/LLM security exposure are a plus.
• Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus.

Responsibilities

• Support threat modeling and design reviews across a broad and growing service portfolio.
• Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
• Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
• Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
• Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.

Skills

Threat modeling

API security

SAST/SCA

Python automation

OWASP Top 10

REST

GraphQL

Ruby

Python

Scala

Job description

About the Role

ICapital is looking for a hands‑on Application Security practitioner to join a small, high‑impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.

Responsibilities

• Support threat modeling and design reviews across a broad and growing service portfolio.
• Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
• Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
• Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
• Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.

Qualifications

• Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
• Real understanding of attack patterns and exploitation techniques
• Familiar with OWASP Top 10 in practice
• API security experience with REST and GraphQL assessment
• Able to build and maintain security automation in Python, tooling that scales AppSec capacity
• Understanding of web application and API security
• Able to operate with autonomy in an environment still building its processes
• Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
• Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus

Benefits

The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.

For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/

iCapital is proud to be an Equal Employment Opportunity and Aff… We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.