Senior Application Security Engineer

About the role

The Senior Application Security Engineer is a senior individual contributor responsible for strengthening Apollo’s secure software development lifecycle and reducing application risk across product, platform, and AI-powered features. This role blends deep code-level application security work with strong cross-functional partnership, including threat modeling, AppSec tooling, and developer enablement.

Responsibilities

• Own and continuously improve the secure software development lifecycle for Apollo applications.
• Perform application security reviews, threat modeling, and deep code-level analysis for high-impact product, platform, and AI features.
• Drive execution-heavy vulnerability management across internal reviews, bug bounty, pentests, and SCA/runtime findings.
• Perform hands-on validation and offensive security testing of applications and fixes, including exploit development and red-team-style exercises.
• Configure and improve AppSec tooling and integrations, including SAST configuration and dashboards.
• Select, build, or refine security tooling and automations to reduce manual effort and scale AppSec operations.
• Support and scale security enablement for engineers and security champions through secure coding and AI-safety content.

Required skills

• Software engineering
• Application security
• SaaS
• Ruby
• Python
• Linux
• Cloud
• GCP
• Secure design
• Authentication
• Authorization
• Vulnerability management
• Penetration testing
• AI-assisted tools

Nice to have

• AI-native product security
• Security training
• Developer enablement

Benefits

• Equity
• Company bonus
• 401(k) plan
• Paid holidays
• Flex PTO
• Parental leave
• Employee assistance program
• Global travel coverage
• Life/AD&D/STD/LTD insurance
• FSA/HSA and medical, dental, and vision benefits

About the Company

Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally. Founded in 2015, the company is an AI-native organization that provides sales and marketing teams with verified contact data and engagement tools in one unified platform.