Lead AppSec Architect for AI-Powered Platforms

Apolloio; United States; Remote; USD 160,000 - 210,000; Full time

Benefits offered by this job

Equity

Job summary

Apollo.io is seeking a Staff Application Security Engineer to lead AppSec strategy and hands-on security across product, platform, and AI-powered features. You will shape roadmaps with secure-by-default patterns, mentor engineers, and drive security architecture reviews while solving ambiguous, high-scale problems.

You will design and implement safe OAuth/token handling, secure code review practices, and AI security controls, influencing multiple teams to adopt robust security standards without

Qualifications

• Track record of leading AppSec strategy across multiple teams with measurable results (10+ years in software engineering or AppSec).
• Expert code review, pentesting, and exploit development skills with ability to fix design flaws against bypass attempts.
• Strong software development skills; production code experience; Ruby on Rails highly valued; Python a plus.

Responsibilities

• Lead Apollo’s multi-year AppSec strategy and translate it into cross-team initiatives.
• Shape roadmaps for Engineering, Product, Platform and Data with secure-by-default patterns.
• Define secure design, code review, and risk standards for AI-generated code and systems.
• Mentor engineers and security champions; grow the champions program and hiring bar.
• Lead security architecture reviews, threat modeling, and secure-by-default building blocks.
• Drive vulnerability management across reviews, bug bounty, pentests, and runtime findings.

Skills

AppSec strategy

Code review

Penetration testing

Exploit development

Ruby on Rails

Python

Linux

Cloud fundamentals

GCP

Kubernetes

Secure architecture

AI security

Influence without authority

Job description

Apollo.io is seeking a Staff Application Security Engineer to lead AppSec strategy and hands-on security across product, platform, and AI-powered features. You will shape roadmaps with secure-by-default patterns, mentor engineers, and drive security architecture reviews while solving ambiguous, high-scale problems.

You will design and implement safe OAuth/token handling, secure code review practices, and AI security controls, influencing multiple teams to adopt robust security standards without