Staff Application Security Engineer

Join Apollo as a Staff Application Security Engineer, where you will lead the application security strategy and tackle complex AppSec challenges. You will shape the roadmaps of Engineering, Product, and Platform teams, set AppSec standards, mentor senior engineers, and drive the adoption of secure-by-default building blocks. This role requires strong software development skills, deep experience with secure architecture, and a track record of leading AppSec strategy. Enjoy remote work, flexible time off, competitive pay, and global healthcare coverage.

Strong software development skills and the ability to ship production code. Ruby and Ruby on Rails experience is highly valuable, and Python is a plus. Strong Linux and cloud fundamentals, ideally GCP and Kubernetes

Hands-on experience securing AI-powered systems or agent features, and a clear point of view on how AI changes application security

About Apollo.io

Deep experience with secure architecture and authentication and authorization patterns, and with building security building blocks that other teams adopt

Responsibilities

• Lead the development and implementation of Apollo's multi-year application security strategy, ensuring alignment with the Security department's key results.
• Shape the roadmaps of Engineering, Product, and Platform teams to integrate secure patterns as the default, and set the AppSec standard for secure development practices.
• Mentor senior engineers and security champions, grow the champions program, and help raise the hiring bar to ensure the AppSec program is sustainable and scalable.
• The judgment to make hard risk calls under ambiguity, and the influence to align technical and non-technical leaders without formal authority
• Expert code review, penetration testing, and exploit development skills, with the ability to find design flaws in unfamiliar codebases and land fixes that hold up against bypass attempts

Requirements

• A track record of leading AppSec strategy that changed how several engineering teams build, with measurable results, typically backed by 10+ years in software engineering or application security
• Experience leading security for AI-native products, internal agents, or AI-assisted engineering workflows at scale
• Public security work, such as CVEs, research, talks, or open-source tools, or certifications such as OSCP or OSWE

Preferred

• Experience building or scaling a security champions or developer enablement program

Pay

USD 225,400 - 281,800