Senior Application Security Engineer

Responsibilities

• Secure SDLC, design review, and threat modeling
• Own and continuously improve the secure software development lifecycle for Apollo applications so security is embedded into design, implementation, and deployment.
• Perform application security reviews, threat modeling, and deep code-level analysis for high-impact product, platform, and AI features before launch.
• Provide practical security architecture guidance to Engineering, Product, and IT teams
• Help define and maintain application-security guardrails, secure design expectations, code review standards, and risk models for new and existing systems.
• Vulnerability management and hands-on remediation
• Drive execution-heavy vulnerability management across internal reviews, bug bounty, pentests, SCA/runtime findings, and other research signals, ensuring findings are validated, prioritized, routed clearly, and tracked through remediation and verification within SLAs.
• Go beyond identifying issues: read the code, explain root cause, propose the safest fix, and directly implement or support remediation when needed for complex vulnerabilities.
• Perform hands-on validation and offensive security testing of applications and fixes, including exploit development, bypass testing, adversarial thinking, and focused red-team-style exercises, to confirm remediations address the underlying issue rather than only the initial symptom.
• Work across the kinds of application security issues common in modern SaaS environments, including authentication and authorization weaknesses, access control risks, OAuth and CSRF design flaws, SSRF, cryptographic and verification issues, information disclosure and data exposure risks, unsafe execution and…

Languages