RemoteLeaf Logo
Log in Sign up

Staff Application Security Engineer

51 minutes ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
Docker Elasticsearch Kubernetes Linux MongoDB OAuth Penetration Testing Python React Ruby Ruby on Rails Terraform
Apply Now
Apollo.io

Apollo.io

Apollo.io is a sales intelligence platform that helps businesses find, engage, and convert leads at scale with a database of over 275 million contacts and 73 million companies.

Professional Services
251-1K
Founded 2015
$251M raised
View All Jobs 5

Description

  • Lead multi-year application security strategy and translate it into cross-team initiatives tied to Security goals.
  • Shape Engineering, Product, Platform, and Data roadmaps to incorporate security early.
  • Define secure design, code review, risk modeling, and AI-generated code standards.
  • Lead security architecture reviews and threat modeling for complex, high-scale systems.
  • Design and drive adoption of secure-by-default security building blocks.
  • Oversee vulnerability management across reviews, bug bounty, penetration testing, SCA, and runtime findings.
  • Investigate complex vulnerabilities through code review, exploit development, bypass testing, and variant analysis.
  • Build AI-augmented AppSec workflows for code review, threat modeling, triage, and remediation.
  • Define security controls for AI systems and agent features, including guardrails, permissions, and data-exfiltration risks.
  • Mentor senior engineers and security champions and scale the security champions program.

Requirements

  • 10+ years of experience in software engineering or application security, with a track record of leading AppSec strategy across multiple engineering teams.
  • Expertise in code review, penetration testing, exploit development, and identifying design flaws in unfamiliar codebases.
  • Strong software development skills and experience shipping production code.
  • Ruby and Ruby on Rails experience; Python is a plus.
  • Strong Linux and cloud fundamentals, ideally including GCP and Kubernetes.
  • Deep experience with secure architecture, authentication, authorization, and reusable security building blocks.
  • Hands-on experience securing AI-powered systems or agent features.
  • Ability to make risk decisions under ambiguity and influence technical and non-technical leaders without formal authority.
  • Experience scaling security champions or developer enablement programs preferred.
  • Public security contributions or certifications such as CVE research, security talks, open-source tools, OSCP, or OSWE preferred.

Benefits

  • $225,400–$281,800 USD total cash compensation range.
  • Equity and company bonus eligibility.
  • 401(k) plan.
  • Flex PTO, at least 10 paid holidays, and parental leave.
  • Medical, dental, vision, FSA/HSA, and life/disability insurance.
  • Employee assistance, wellbeing benefits, and global travel coverage.
  • Professional growth resources, support, autonomy, and cross-functional collaboration.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Fingerprint

Staff Application Security Engineer

Fingerprint 51-250 IT Services

Fingerprint is hiring a Staff Application Security Engineer to build and operate its foundational AppSec function, securing the device-intelligence platform and raising security standards across engineering.

United States Full-time Lead Application Security Engineer
$177k-$240k
Android AWS CI/CD Cloudflare Encryption Go iOS JavaScript Network Security Penetration Testing Python Secrets Management TypeScript
1 hour, 21 minutes ago
Very Good Security

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

United States Canada Full-time Mid Level Application Security Engineer
$175k-$230k
AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
4 days, 1 hour ago
Harness.io

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

United States Full-time Senior Application Security Engineer
$150k-$200k
AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
4 days, 2 hours ago
Gomining

Product Security Engineer

Gomining 11-50 Construction & Engineering

Product Security Engineer partnering with engineering, Platform, and DevOps teams to secure applications, cloud infrastructure, APIs, and the software development lifecycle as the platform scales.

Latvia Poland Serbia Spain Cyprus Georgia Full-time Mid Level Application Security Engineer
AWS Azure Blockchain CI/CD Docker GCP Kubernetes Microservices Penetration Testing REST API Secrets Management
4 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers