Senior AppSec Engineer for Secure SaaS & AI

Apollo.io; United States; Remote; USD 190,000 - 273,000; Full time

Benefits offered by this job

Equity

401(k)

Paid holidays

Flex PTO

Parental leave

Wellbeing benefits

Travel coverage

Medical/dental/vision

Job summary

Apollo.io is seeking a Senior Application Security Engineer to strengthen the secure software development lifecycle across product, platform, and AI features. This senior IC role blends code-level security work with cross-functional partnership to drive meaningful improvements.

You will lead threat modeling, security reviews, vulnerability remediation, and tooling enhancements, leveraging AI responsibly to scale security while maintaining rigorous engineering judgment.

Qualifications

• 5+ years in software engineering or application security.
• Hands-on AppSec depth in SaaS environments.
• Experience reading/writing production code (Ruby valuable).
• Strong Linux and cloud fundamentals (GCP preferred).
• Familiarity with vulnerability management and tooling.

Responsibilities

• Own and improve the secure SDLC for Apollo apps.
• Conduct security reviews, threat modeling, and code analysis.
• Provide security architecture guidance to Eng, Product, IT.
• Define guardrails, design standards, and risk models.
• Lead vulnerability management across reviews, bug bounty, pentests.
• Read code, diagnose root causes, and land durable fixes.
• Validate fixes with hands-on testing and red-team exercises.
• Tackle auth/OAuth, SSRF, crypto, and data-exposure risks.
• Apply risk-based severity decisions for issues.
• Configure AppSec tooling, dashboards, and ignore lists.

Skills

AppSec depth

Code reading

Ruby experience

Python scripting

Linux fundamentals

Cloud knowledge

Threat modeling

Vulnerability mgmt

Security tooling

Automation skills

AI security

Communication skills

Job description

Apollo.io is seeking a Senior Application Security Engineer to strengthen the secure software development lifecycle across product, platform, and AI features. This senior IC role blends code-level security work with cross-functional partnership to drive meaningful improvements.

You will lead threat modeling, security reviews, vulnerability remediation, and tooling enhancements, leveraging AI responsibly to scale security while maintaining rigorous engineering judgment.