SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 130,000 / annual
iCapital is seeking a hands-on Application Security Engineer to join a small, high-impact team building a modern AppSec program. You will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement initiatives.
Key responsibilities include:
- Support threat modeling and design reviews across a broad and growing service portfolio
- Drive shift-left security initiatives, security in CI/CD pipelines, developer guidance, and SAST/SCA remediation workflows
- Contribute to API security across the organization, assessing API exposure and validating authentication and authorization patterns
- Write Python automation that scales AppSec capacity, including triage tooling, finding pipelines, and security context enrichment
- Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering
Required qualifications:
- Hands-on experience in secure design, threat modeling, API security, offensive security, or SAST/SCA program work
- Real understanding of attack patterns and exploitation techniques
- Practical familiarity with OWASP Top 10
- API security experience with REST and GraphQL assessment
- Ability to build and maintain security automation in Python
- Understanding of web application and API security
- Ability to operate with autonomy in an environment still building its processes
Desired qualifications include relevant certifications, cloud-native environment experience, AI/LLM security exposure, and developer/engineer background with fluency in Ruby, Python, or Scala.
The role is hybrid, with office presence Monday-Thursday and remote flexibility on Friday. Compensation includes base salary, equity for all full-time employees, annual performance bonus, employer-matched retirement, comprehensive healthcare (100% employer-paid dental and vision), telemedicine, virtual mental health counseling, parental leave, and unlimited PTO.
