# Senior Application Security Engineer - Vice President

[Icapitalnetwork](https://gurify.com/jobs?q=Icapitalnetwork) · Lisbon, Portugal · Posted 7 weeks ago

Executive

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/icapitalnetwork/jobs/8658252002)

## Job description

### About the role:

We are looking for a technically strong Senior Application Security practitioner ready to take on real ownership. You will work directly with the Head of AppSec, contributing to the Secure Design practice and helping drive shift-left security across the organization.

### What You'll Do

- Help build and mature the Secure Design and Threat Modeling program by defining methodology, review standards, and sign-off criteria across the organization

- Drive shift-left security initiatives, embedding security earlier in the development lifecycle through design reviews, developer enablement, and security gating in CI/CD

- Own API security as a discipline

- Support offensive security initiatives

- Build and maintain security automation in Python, tooling that scales AppSec capacity

- Work directly with developers on SAST and SCA remediation, scan optimization, and reducing friction in the security feedback loop

- Contribute to AI-assisted security pipelines; define escalation paths, SLAs, and accountability structures for vulnerability management

### What We're Looking For

- Hands-on experience across secure design, threat modeling, API security, and offensive security

- Offensive security capability with penetration testing experience and solid understanding of real-world attack and API exploitation patterns

- Deep familiarity with OWASP Top 10 in practice

- API security depth, experience assessing REST and GraphQL APIs

- Python proficiency, comfortable building automation tools that others will depend on

- Experience in shift-left programs: security in CI/CD, developer enablement, design review processes

- Understanding of web application and API security

- Comfortable reading code across languages and engaging with engineering teams at technical depth

- Familiarity with cloud-native environments and attack surface management

- Demonstrated ability to influence across engineering and product and operate at architecture level

- Relevant certifications are a plus: OSCP, OSWE, GWEB, CSSLP, CISSP, CEH

- Exposure to AI-assisted security tooling or LLM security is a differentiator

- Experience as a developer and fluency in Ruby, Python, and Scala are a plus

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday).

### Benefits

iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).

For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

**Live in Icapitalnetwork’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- TR [Application Security Engineer](https://gurify.com/job/application-security-engineer-at-tripleten-18e847d1f8e7) Tripleten · Lisbon, Portugal · 2 weeks ago
- JG [Application Security (AppSec) Engineer](https://gurify.com/job/application-security-appsec-engineer-at-joom-group-8fc35aa2afbe) Joom Group · Lisbon, Portugal · 7 weeks ago
- VE [Technical Program Manager, Application Security](https://gurify.com/job/technical-program-manager-application-security-at-veeamsoftware-a14e5306c5ec) Veeamsoftware · Lisbon, Portugal · 3 weeks ago
- VE [Technical Program Manager, Application Security](https://gurify.com/job/technical-program-manager-application-security-at-veeamsoftware-34c12e4669e5) Veeamsoftware · Lisbon, Portugal · 3 weeks ago
- BR [Lead Application Security Engineer](https://gurify.com/job/lead-application-security-engineer-at-brunswickgroup-5849dbce754f) Brunswickgroup · London, United Kingdom · last week
- VI [Senior Application Security Engineer](https://gurify.com/job/senior-application-security-engineer-at-via-29d6a84848f6) Via · Tel Aviv · last week

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Application Security Engineer - Vice President","description":"\u003Ch3\u003EAbout the role:\u003C/h3\u003E\u003Cp\u003EWe are looking for a technically strong Senior Application Security practitioner ready to take on real ownership. You will work directly with the Head of AppSec, contributing to the Secure Design practice and helping drive shift-left security across the organization.\u003C/p\u003E\u003Ch3\u003EWhat You\u0026#39;ll Do\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHelp build and mature the Secure Design and Threat Modeling program by defining methodology, review standards, and sign-off criteria across the organization\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDrive shift-left security initiatives, embedding security earlier in the development lifecycle through design reviews, developer enablement, and security gating in CI/CD\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwn API security as a discipline\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport offensive security initiatives\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild and maintain security automation in Python, tooling that scales AppSec capacity\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWork directly with developers on SAST and SCA remediation, scan optimization, and reducing friction in the security feedback loop\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EContribute to AI-assisted security pipelines; define escalation paths, SLAs, and accountability structures for vulnerability management\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat We\u0026#39;re Looking For\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience across secure design, threat modeling, API security, and offensive security\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOffensive security capability with penetration testing experience and solid understanding of real-world attack and API exploitation patterns\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeep familiarity with OWASP Top 10 in practice\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAPI security depth, experience assessing REST and GraphQL APIs\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPython proficiency, comfortable building automation tools that others will depend on\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience in shift-left programs: security in CI/CD, developer enablement, design review processes\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EUnderstanding of web application and API security\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EComfortable reading code across languages and engaging with engineering teams at technical depth\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with cloud-native environments and attack surface management\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDemonstrated ability to influence across engineering and product and operate at architecture level\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERelevant certifications are a plus: OSCP, OSWE, GWEB, CSSLP, CISSP, CEH\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExposure to AI-assisted security tooling or LLM security is a differentiator\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience as a developer and fluency in Ruby, Python, and Scala are a plus\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EWe believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday).\u003C/p\u003E\u003Ch3\u003EBenefits\u003C/h3\u003E\u003Cp\u003EiCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).\u003C/p\u003E\u003Cp\u003EFor additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-application-security-engineer-vice-president-at-icapitalnetwork-c266e72cade2"},"url":"https://gurify.com/job/senior-application-security-engineer-vice-president-at-icapitalnetwork-c266e72cade2","datePosted":"2026-08-24","validThrough":"2026-12-01T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Icapitalnetwork","sameAs":"https://job-boards.greenhouse.io/icapitalnetwork"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"PT","addressLocality":"Lisbon"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Portugal","item":"https://gurify.com/jobs/portugal"},{"@type":"ListItem","position":3,"name":"Senior Application Security Engineer - Vice President","item":"https://gurify.com/job/senior-application-security-engineer-vice-president-at-icapitalnetwork-c266e72cade2"}]}
```