Staff Application Security Engineer
Core
Leads application security strategy and delivers hands-on security for Apollo's product, platform, and AI-powered features.
Role type
Staff Application Security Engineer (Strategy & Hands-on IC)
Builds
Secure architecture patterns, shared security building blocks, and AI-augmented AppSec tooling for Apollo's revenue platform.
Domain
SaaS / Application Security / AI Security
Deliverable
production ML models
Required skills
AppSec strategy, exploit development, penetration testing, secure architecture, AI security, code review, Ruby on Rails, Python, Linux, GCP, Kubernetes
Preferred skills
AI-native product security, security champions program, public security research (CVEs/talks), OSCP/OSWE certification
Technologies
Ruby, Ruby on Rails, Python, MongoDB, Elasticsearch, Kubernetes, Docker, Terraform, GCP
Responsibilities
Lead multi-year AppSec strategy and cross-team initiatives; Shape Engineering/Product/Platform roadmaps for early security integration; Design secure-by-default building blocks (auth, OAuth, SSRF-safe clients); Conduct threat modeling and security architecture reviews for AI/agent features; Mentor senior engineers and grow the security champions program; Build automation for AI-assisted code review and remediation.
Seniority
Staff, hands-on IC with strategic influence
