Staff Application Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $225.4k - $281.8k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Apollo.io

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2015

🤝 B2B

☁️ SaaS

🤖 Artificial Intelligence

B2B • SaaS • Artificial Intelligence

Apollo. io is an all-in-one sales platform designed to streamline and enhance sales operations from lead generation to deal management. The platform offers tools for contact and account search, scores and signals analysis, inbound optimization, sales engagement, and more, leveraging AI and a living data network for comprehensive sales intelligence. Apollo. io is ideal for sales professionals, marketers, and revenue operations teams aiming to enhance productivity and efficiency by automating workflow tasks and integrating CRM systems. With a focus on improving sales performance through analytics and conversation intelligence, Apollo. io helps businesses find the right leads at the right time, nurture those leads effectively, and close deals efficiently.

📋 Description

• Lead Apollo’s multi-year application security strategy and translate it into cross-team initiatives • Report progress, risks, and tradeoffs to Security leadership • Shape Engineering, Product, Platform, and Data roadmaps to incorporate security work early • Represent AppSec in cross-department decisions • Set secure design, code review, and risk model standards, including standards for AI-generated and agent-generated code • Mentor senior engineers and security champions • Grow the security champions program and help raise the hiring bar • Lead security architecture reviews and threat modeling for ambiguous, high-scale, multi-team systems • Define secure-by-default building blocks such as shared authorization, safe OAuth and token handling, and SSRF-safe HTTP clients • Shape vulnerability management across internal reviews, bug bounty, pentests, SCA, and runtime findings • Analyze root causes, bug classes, and risk-based severity • Read code across teams, develop exploits, test bypasses, and lead variant analysis and staged remediation • Set the standard for AI-augmented AppSec • Use AI and agents for code review, threat modeling, triage, and remediation • Build automation adopted by teams outside Security • Define security controls for AI systems and agent features, including input/output handling, AI-exposed APIs, prompt and response guardrails, tool permissions, and data-exfiltration paths

🎯 Requirements

• Track record of leading AppSec strategy across several engineering teams, typically backed by 10+ years in software engineering or application security • Expert code review, penetration testing, and exploit development skills • Ability to find design flaws in unfamiliar codebases and develop fixes resistant to bypass attempts • Strong software development skills and ability to ship production code • Ruby and Ruby on Rails experience highly valuable • Python experience is a plus • Strong Linux and cloud fundamentals, ideally GCP and Kubernetes • Deep experience with secure architecture and authentication and authorization patterns • Experience building security building blocks adopted by other teams • Hands-on experience securing AI-powered systems or agent features • Judgment to make hard risk calls under ambiguity • Influence to align technical and non-technical leaders without formal authority • Preferred: security leadership for AI-native products, internal agents, or AI-assisted engineering workflows at scale • Preferred: building or scaling a security champions or developer enablement program • Preferred: public security work such as CVEs, research, talks, or open-source tools • Preferred: OSCP or OSWE certification

🏖️ Benefits

• Equity • Company bonus • 401(k) plan • At least 10 paid holidays per year • Flex PTO • Parental leave • Employee assistance program • Wellbeing benefits • Global travel coverage • Life, AD&D, STD, and LTD insurance • FSA/HSA • Medical, dental, and vision benefits • Resources, support, and autonomy for professional growth