Apply on Employer Site

Apollo Global Management, Inc. · 9 hours ago

Lead Application Security Engineer

New York, NY

Full-time

Onsite

Lead/Staff, Director/Executive

$19K/yr - $250K/yr

10+ years exp

Apollo Global Management, Inc. is a global team of alternative investment managers known for their expertise in Private Equity, Credit, and Real Estate. They are seeking a Director of Application Security to lead the firm's application security strategy, overseeing the design and operation of a scalable application security program while collaborating with various teams to enhance security practices throughout the software lifecycle.

Asset ManagementCreditFinancial ServicesProperty ManagementReal Estate

Comp. & Benefits

H1B Sponsor Likely

Responsibilities

Application Threat Modeling: Lead threat modeling for new and existing applications to identify risks, recommend mitigations, and ensure control alignment with enterprise standards

Application Design & Architecture: Guide teams in secure design principles, validate adherence to security controls, and ensure threat models inform architectural decisions

Secure SDLC Development & Implementation: Define and implement secure development lifecycle (SDLC) processes and tools—including SAST, SCA, and secret scanning—and drive adoption across development teams

Operationalization of Security Tools: Integrate and maintain security tooling to streamline analysis, reporting, and remediation workflows throughout the software lifecycle

Application Security Awareness & Enablement: Build and sustain a security champion program, fostering developer engagement and ensuring teams understand secure coding practices and delivery expectations

Application Security Testing: Oversee penetration testing, code reviews, and application assessments to identify vulnerabilities and guide timely remediation

Governance, Risk, and Compliance: Establish governance frameworks to ensure compliance with internal security policies, industry standards, and regulatory requirements. Monitor, report, and continuously improve the firm’s compliance posture

Qualification

Application SecuritySecure SDLCPenetration TestingApplication ArchitectureSaaS Security ToolsSecurity StandardsCloud EnvironmentsCollaboration SkillsProfessional CertificationsCritical Thinking

Required

10+ years of hands-on experience in Application Security, with a strong background in software development (IDE/CLI environments)

Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field

Demonstrated success partnering with software development teams to provide security oversight across complex application ecosystems

Proven expertise with IDEs, version control systems, CI/CD pipeline management, secure SDLC practices, and SaaS-based security tools (SCA, SAST, DAST) as well as application inventory management

Strong understanding of application architecture, security controls, cloud environments, and penetration testing methodologies

Exceptional collaboration and critical thinking skills, with the ability to operate effectively in a fast-paced, dynamic environment

Familiarity with leading security standards and frameworks (OWASP, NIST, ISO 27001, MITRE ATT&CK) and testing tools such as Burp Suite

Experience working within or alongside regulated industries (e.g., financial services) and understanding their impact on application security practices

Ongoing commitment to staying informed on emerging threats and trends to proactively enhance security measures

Preferred

Experience with Snyk and GitHub is highly desirable

Professional certifications such as CISSP, CSSLP, CASE, GWEB, or MCSA/MCSE are strongly preferred

Benefits

Discretionary annual bonus based on personal, team, and Firm performance

Company

Apollo Global Management, Inc.

Glassdoor3.8

Apollo is a high-growth, global alternative asset manager.

Founded in 1990

New York, New York, USA

1001-5000 employees

https://www.apollo.com

H1B Sponsorship

Apollo Global Management, Inc. has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (1)