Senior Application Security Engineer

Join Apollo as a Senior Application Security Engineer, where you'll play a crucial role in strengthening our secure software development lifecycle and reducing application risk across our products, platform, and AI-powered features. This position requires deep code-level application security expertise and strong cross-functional collaboration. You'll be responsible for application security reviews, threat modeling, AppSec tooling, findings triage and remediation follow-through, external testing intake, and developer enablement.

Responsibilities

• Posséder et améliorer en continu le cycle de vie de développement logiciel sécurisé pour les applications Apollo, en veillant à ce que la sécurité soit intégrée dans la conception, la mise en œuvre et le déploiement.
• Effectuer des examens de sécurité des applications, des modélisations de menaces et des analyses de code approfondies pour des produits, des plateformes et des fonctionnalités d'IA à fort impact avant leur lancement.
• Conduire la gestion des vulnérabilités axée sur l'exécution à travers les examens internes, les programmes de bug bounty, les tests d'intrusion, les résultats SCA/runtime et d'autres signaux de recherche.
• Demonstrated ability to perform deep code review, penetration testing, and exploit-oriented validation, and to either fix vulnerabilities directly or work closely with engineers to land durable remediations that hold up against bypass attempts and variant analysis

Requirements

• 5+ years of software engineering or application security experience, with meaningful hands-on AppSec depth in modern SaaS environments
• Experience handling findings from bug bounty, pentests, internal reviews, or automated security tooling through closure and verification
• Experience securing AI-powered systems or features, including AI API exposure, prompt and response handling, data protection, misuse scenarios, and monitoring expectations
• Strong software development skills and the ability to read, write, and ship production code; Ruby experience is highly valuable, and Python or similar scripting ability is a plus
• Experience using AI-assisted tools, automations, APIs, or structured workflows to improve engineering or security processes at scale
• Strong Linux and cloud fundamentals, ideally with experience in GCP-backed environments
• Strong written and verbal communication, stakeholder management, and influencing skills across technical and non-technical partners
• Deep familiarity with common AppSec issues, secure design, secure authentication and authorization patterns, vulnerability management, and developer security tooling
• Experience supporting or leading security reviews for AI-native products, internal agents, or AI-assisted engineering workflows
• Experience improving secure-by-design practices and AppSec observability in a fast-moving engineering organization

Preferred

• Experience with security training, developer enablement, or security champions programs
• Relevant security certifications are a plus

Pay

USD 190,100 - 273,200