Senior Application Security Engineer (Poland, Remote)

<p><a href="http://apollo.io/" target="_blank">Apollo.io</a> is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world's largest enterprises. <a href="http://apollo.io/" target="_blank">Apollo.io</a> provides sales and marketing teams with easy access to verified contact data for over 270 million B2B contacts, along with tools to engage and convert these contacts in one unified platform. By helping revenue professionals find the most accurate contact information and automating the outreach process, <a href="http://apollo.io/" target="_blank">Apollo.io</a> turns prospects into customers. Apollo raised a series D in 2023 and is backed by top-tier investors, including Sequoia Capital, Bain Capital Ventures, and more, and counts the former President and COO of Hubspot, JD Sherman, among its board members. <a href="http://apollo.io/" target="_blank">Apollo.io</a> is growing rapidly, with 900% revenue growth since 2021, and is looking for world-class talent to keep building with us.</p><p></p> <p><strong>Your Role &amp; Mission</strong></p> <p>The <strong>Senior Application Security Engineer</strong> will work with product and engineering to create a secure SDLC, design security features and implement tools, education and processes to reduce risk of security issues in the tech stack.</p> <p><strong>Responsibilities</strong></p> <ul> <li>Select or build tooling to help developers build secure code</li> <li>Provide overall security architectural advice to Engineering and IT</li> <li>Manage issues sourced from penetration tests and bug bounty programs </li> <li> Participate in the security champions program</li> <li>Help Product, Engineering and IT incorporate security requirements into new products from inception</li> <li>Assist in the creation and maintenance of Security Risk Models for new projects and existing systems</li> </ul> <p><strong>Skills &amp; Competencies</strong></p> <ul> <li>5+ Years of Web Application Security experience</li> <li>Strong experience with vulnerability management, or penetration testing is required.</li> <li>Extensive experience in conducting Architectural Reviews and Threat Models frequently is required. </li> <li>Strong knowledge of common AppSec issues and tooling (e.g. SCA, SAST, DAST)</li> <li>Strong Linux knowledge is a plus. </li> <li>Experience with cloud services, ideally GCP is plus. </li> <li>Strong software development skills ideally in Ruby, Node Secondary</li> <li>Strong Communication and Influencing skills</li> <li>Should have worked in SaaS environment. </li> <li>Should have extensive knowledge of Open Redirect, OAuth, and CSRF. </li> <li>Certifications: OSCP/OSWE/CEH: At least 1 Certification is a plus. </li> </ul> <p>#LI-JM1</p> <p></p><p><strong>What You’ll Love About Apollo</strong></p> <p>Besides the great compensation package and culture that thrives in openness and excellence, we invest tremendous effort into developing our remote employees’ careers. The team embraces that we have a sole purpose: to help customers maximize their full revenue potential on the Apollo platform. This mindset opens us up to a lot of creative approaches to making customers successful at scale. You’ll be a significant part of a lean, remote team, empowered to really own your role as a proactive educator. We’re very collaborative at Apollo, so you’ll be able to lean on your teammates, even in adjacent departments, to help you achieve lofty goals. You’ll be supported and encouraged to experiment and take educated risks that lead to big wins. And, you’ll have a whole team remotely by your side to help you do it!</p>