Senior Application Security Architect & Strategy Lead

Apollo.io; United States; Remote; USD 225,000 - 282,000; Full time

Benefits offered by this job

Equity

401(k) plan

At least 10 paid holidays per year

Flexible PTO

Parental leave

Employee assistance program and well‑b

Global travel coverage

Life/AD&D/STD/LTD insurance

Health, dental, vision benefits

Job summary

Apollo.io is seeking a Staff Application Security Engineer to lead security strategy across product, platform, and AI-powered features. You will shape roadmaps, set secure design standards, and mentor engineers to scale the AppSec program beyond any one person.

You will work hands-on to address high-stakes security challenges, influence across Engineering, Product, and Data, and define guardrails for AI security and secure-by-default components.

Qualifications

• 10+ years in software engineering or application security.
• Expert code review, penetration testing, and exploit development skills.
• Strong development skills; production code; Ruby on Rails is valuable; Python is a plus.
• Deep experience with secure architecture and authentication/authorization patterns.
• Hands-on security for AI-powered systems and agent features.

Responsibilities

• Lead AppSec strategy and multi-year initiatives across multiple teams.
• Shape roadmaps to embed secure patterns early in development.
• Set secure design, code review, and risk standards for the department.
• Mentor engineers and grow the security champions program.

Skills

AppSec strategy

Code review

Penetration testing

Exploit development

Ruby on Rails

Python

Linux

GCP

Kubernetes

Secure architecture

AI security

Influence without authority

Tools

Docker

Terraform

MongoDB

Elasticsearch

Job description

Apollo.io is seeking a Staff Application Security Engineer to lead security strategy across product, platform, and AI-powered features. You will shape roadmaps, set secure design standards, and mentor engineers to scale the AppSec program beyond any one person.

You will work hands-on to address high-stakes security challenges, influence across Engineering, Product, and Data, and define guardrails for AI security and secure-by-default components.