Application Security Engineer - Assistant Vice President
At its midpoint, $115k/yr, this role pays less than the $229k/yr midpoint for Security Leadership openings today (usual band $200k–$385k/yr).
The full posting
About the Role
ICapital is looking for a hands-on Application Security practitioner to join a small, high-impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.
Responsibilities
- Support threat modeling and design reviews across a broad and growing service portfolio.
- Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
- Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
- Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
- Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.
Qualifications
- Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
- Real understanding of attack patterns and exploitation techniques
- Familiar with OWASP Top 10 in practice
- API security experience with REST and GraphQL assessment
- Able to build and maintain security automation in Python, tooling that scales AppSec capacity
- Understanding of web application and API security
- Able to operate with autonomy in an environment still building its processes
- Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
- Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus
Benefits
The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.
For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/
iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Text as iCapital published it; last compared with the original on 11 Nov 2026.
The application
Your details and CV, then 10 questions (1 written).
- 1.What is your full legal name?Short answer
- 2.Are you legally eligible to work in the country where this role is located?Yes or no
- 3.What is your desired base salary expectation? Please specify the amount and currency.Short answer
- 4.What is your desired total annual compensation when considering an equity award? Please specify the amount and currency.Short answer
- 5.Are you subject to any form of Garden Leave or a Non-Compete Agreement? If yes, please provide detail below.Short answer
- 6.iCapital is an office-first culture, as such all employees are required to work in the office Monday-Thursday, with the flexibility to work remotely on Friday, depending on the department. Please review the job description before applying,Pick any (11 options)
- 7.Do you currently require any type of visa sponsorship for employment?Yes or no
- 8.Do you require any type of visa sponsorship for employment in the future (i.e. student visa transfer to H1B, etc)?Yes or no
- 9.What is your desired bonus expectation? Please specify the amount and currency.Short answer
- 10.What forms of deferred compensation do you currently have (e.g., unpaid or deferred bonus, equity, or other long‑term incentive plans)? Please provide as much detail as possible. If no form of deferred compensation exists, please input N/AWritten answer
Taken from iCapital's application form as it stood on 11 Nov 2026.
The employer: iCapital
iCapital runs the platform wealth managers use to buy private markets funds; its security hires cover application, cloud and DevSecOps engineering plus security operations.
Pay and benefits: Corporate-titled roles (Associate, AVP, VP) at a privately held fintech.
Run a security team before?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when iCapital posts a security role
We read iCapital's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.