iCapital

Application Security Engineer - Assistant Vice President

iCapital
Apply
2 months ago
Salt Lake City, UT, USAStaff+
H1B sponsor

Base Salary

$100k - $130k/yr

Responsibilities

  • Support threat modeling and secure design reviews across the service portfolio.
  • Support shift-left security, security in CI/CD, developer guidance, and SAST/SCA remediation workflows.
  • Assess API exposure and validate authentication and authorization patterns for organizational APIs.
  • Build Python automation for triage tooling, finding pipelines, and security context enrichment.
  • Partner with developers to remediate SAST and SCA findings, reduce false positives, and strengthen secure development practices.

Requirements

  • Hands-on experience with secure design and threat modeling, API security, offensive security, or SAST/SCA program work.
  • Understanding of attack patterns, exploitation techniques, web application security, and API security.
  • Practical familiarity with the OWASP Top 10.
  • Experience assessing REST and GraphQL APIs.
  • Ability to build and maintain AppSec automation in Python.
  • Ability to work autonomously while helping establish processes.
  • Relevant certifications, cloud-native experience, and AI/LLM security exposure are preferred.
  • Developer or engineering experience and fluency in Ruby, Python, and Scala are preferred.

Benefits

  • Equity for full-time employees and an annual performance bonus.
  • Employer-matched retirement plan.
  • Subsidized healthcare with employer-paid dental and vision coverage.
  • Telemedicine and virtual mental health counseling.
  • Parental leave and unlimited paid time off.
  • Monday–Thursday in-office schedule with remote-work flexibility on Friday.

Tech Stack

GraphQLPythonRubyScala

Categories

iCapital

About iCapital

1,001-5,000 employees

iCapital builds a technology platform that lets wealth managers and asset managers offer, transact, and service alternative investments and structured solutions for private clients. The company earns software, data, and administration fees across marketplace access, enterprise integrations, and fund servicing. Founded in 2013 and headquartered in New York, it reports $1.2 trillion of assets serviced globally and serves nearly 3,900 wealth management firms and 144,000 active financial professionals.

Contact me