icapitalnetwork · Salt Lake City, Utah, United States · Salt Lake City, Utah, United States
<div class="elementToProof" data-ogsc="rgb(0, 0, 0)"><strong>About the Role</strong></div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"><strong> </strong></div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)">ICapital is looking for a hands-on Application Security practitioner to join a small, high-impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.</div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"> </div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"><strong>Responsibilities</strong></div> <ul> <li data-ogsc="rgb(0, 0, 0)">Support threat modeling and design reviews across a broad and growing service portfolio.</li> <li data-ogsc="rgb(0, 0, 0)">Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.</li> <li data-ogsc="rgb(0, 0, 0)">Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.</li> <li data-ogsc="rgb(0, 0, 0)">Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.</li> <li data-ogsc="rgb(0, 0, 0)">Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.</li> </ul> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"><strong>Qualifications</strong></div> <ul> <li data-ogsc="rgb(0, 0, 0)">Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work</li> <li data-ogsc="rgb(0, 0, 0)">Real understanding of attack patterns and exploitation techniques</li> <li data-ogsc="rgb(0, 0, 0)">Familiar with OWASP Top 10 in practice</li> <li data-ogsc="rgb(0, 0, 0)">API security experience with REST and GraphQL assessment</li> <li data-ogsc="rgb(0, 0, 0)">Able to build and maintain security automation in Python, tooling that scales AppSec capacity</li> <li data-ogsc="rgb(0, 0, 0)">Understanding of web application and API security</li> <li data-ogsc="rgb(0, 0, 0)">Able to operate with autonomy in an environment still building its processes</li> <li data-ogsc="rgb(0, 0, 0)">Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus</li> <li data-ogsc="rgb(0, 0, 0)">Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus</li> </ul> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"><strong>Benefits</strong></div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)">The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).</div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)"> </div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)">We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.</div> <div class="elementToProof" data-ogsc="rgb(0, 0, 0)">For additional information on iCapital, please visit<span class="Apple-converted-space"> </span><span data-ogsc="blue"><a id="OWA5c812940-6a1f-03e4-a3ef-4ee6389d403f" class="OWAAutoLink" href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icapitalnetwork.com%2Fabout-us&data=05%7C02%7Cconner.pearson%40icapital.com%7C82a030b2205646da474f08df044c729c%7C0ac51d2823c34b35a9fbe1a17aa9eff1%7C0%7C0%7C639234398547271001%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=6iYIxf3HDMmR6DSvdhShZn630nTTB7z%2BUbPc1qdgcdw%3D&reserved=0" data-ogsc="blue" data-outlook-id="ed56f0dd-6b03-4d87-9d5f-4dfc36e7a650"><u>https://www.icapitalnetwork.com/about-us</u></a></span> Twitter: @icapitalnetwork | LinkedIn:<span class="Apple-converted-space"> </span><span data-ogsc="blue"><a id="OWA569c3ce1-558f-9a29-b299-f82baba6ffa6" class="OWAAutoLink" href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ficapital-network-inc&data=05%7C02%7Cconner.pearson%40icapital.com%7C82a030b2205646da474f08df044c729c%7C0ac51d2823c34b35a9fbe1a17aa9eff1%7C0%7C0%7C639234398547313433%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=vtZu8eMMjpAPWEzh6ovW%2FNbNBWl6k0Nyxjk7%2ForM5H4%3D&reserved=0" data-ogsc="blue" data-outlook-id="dce0bfee-d804-4a10-b2b6-b98b9e639576"><u>https://www.linkedin.com/company/icapital-network-inc</u></a></span><span class="Apple-converted-space"> </span>| Awards Disclaimer:<span class="Apple-converted-space"> </span><span data-ogsc="blue"><a id="OWAf56f35d6-66bb-4a78-1c44-c91476fcc55a" class="OWAAutoLink" href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icapitalnetwork.com%2Fabout-us%2Frecognition%2F&data=05%7C02%7Cconn