Position OverviewAt Apollo, we’re a global team of alternative investment managers passionate about delivering uncommon value to our investors and shareholders. With over 30 years of proven expertise across Private Equity, Credit and Real Estate, regions and industries, we’re known for our integrated businesses, our strong investment performance, our value-oriented philosophy – and our people.We are seeking a Director of Application Security to join Apollo’s global Cyber Security &amp; Risk team within Engineering. This leader will define and drive the firm’s application security strategy—strengthening secure development practices, architecture, and runtime environments across a diverse, expanding portfolio.You will oversee the design and operation of a scalable application security program, partnering closely with engineering, security, and business teams to embed security throughout the software lifecycle.Primary Responsibilities<ul><li>Application Threat Modeling: Lead threat modeling for new and existing applications to identify risks, recommend mitigations, and ensure control alignment with enterprise standards.</li><li>Application Design &amp; Architecture: Guide teams in secure design principles, validate adherence to security controls, and ensure threat models inform architectural decisions.</li><li>Secure SDLC Development &amp; Implementation: Define and implement secure development lifecycle (SDLC) processes and tools—including SAST, SCA, and secret scanning—and drive adoption across development teams.</li><li>Operationalization of Security Tools: Integrate and maintain security tooling to streamline analysis, reporting, and remediation workflows throughout the software lifecycle.</li><li>Application Security Awareness &amp; Enablement: Build and sustain a security champion program, fostering developer engagement and ensuring teams understand secure coding practices and delivery expectations.</li><li>Application Security Testing: Conduct regular code reviews and application assessments to identify vulnerabilities and guide timely remediation.</li><li>Governance, Risk, and Compliance: Establish governance frameworks to ensure compliance with internal security policies, industry standards, and regulatory requirements. Monitor, report, and continuously improve the firm’s compliance posture.</li></ul>Qualifications &amp; Experience<ul><li>10+ years of hands-on experience in Application Security, with a strong background in software development (IDE/CLI environments).</li><li>Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field.</li><li>Demonstrated success partnering with software development teams to provide security oversight across complex application ecosystems.</li><li>Proven expertise with IDEs, version control systems, CI/CD pipeline management, secure SDLC practices, and SaaS-based security tools (SCA, SAST, DAST) as well as application inventory management.</li><li>Experience with Snyk and GitHub is highly desirable.</li><li>Strong understanding of application architecture, security controls, cloud environments, and penetration testing methodologies.</li><li>Exceptional collaboration and critical thinking skills, with the ability to operate effectively in a fast-paced, dynamic environment.</li><li>Familiarity with leading security standards and frameworks (OWASP, NIST, ISO 27001, MITRE ATT&amp;CK) and testing tools such as Burp Suite.</li><li>Experience working within or alongside regulated industries (e.g., financial services) and understanding their impact on application security practices.</li><li>Ongoing commitment to staying informed on emerging threats and trends to proactively enhance security measures.</li><li>Professional certifications such as CISSP, CSSLP, CASE, GWEB, or MCSA/MCSE are strongly preferred</li></ul>About ApolloApollo is a high-growth, global alternative asset manager. In our asset management business, we seek to provide our clients excess return at every point along the risk-reward spectrum from investment grade to private equity with a focus on three investing strategies: yield, hybrid, and equity. For more than three decades, our investing expertise across our fully integrated platform has served the financial return needs of our clients and provided businesses with innovative capital solutions for growth. Through Athene, our retirement services business, we specialize in helping clients achieve financial security by providing a suite of retirement savings products and acting as a solutions provider to institutions. Our patient, creative, and knowledgeable approach to investing aligns our clients, businesses we invest in, our employees, and the communities we impact, to expand opportunity and achieve positive outcomes.Our Purpose &amp; Core ValuesOur clients rely on our investment acumen to help secure their future. We must never lose our focus and determination to be the best investors and most trusted partners on their behalf. We strive to be:The leading provider of retirement income solutions to institutions, companies, and individuals.The leading provider of capital solutions to companies. Our breadth and scale enable us to deliver capital for even the largest projects – and our small firm mindset ensures we will be a thoughtful and dedicated partner to these organizations. We are committed to helping them build stronger businesses.A leading contributor to addressing some of the biggest issues facing the world today – such as energy transition, accelerating the adoption of new technologies, and social impact – where innovative approaches to investing can make a positive difference.We are building a unique firm of extraordinary colleagues who:As One Apollo team, we believe that doing great work and having fun go hand in hand, and we are proud of what we can achieve together.Our BenefitsApollo relies on its people to keep it a leader in alternative investment management, and the firm’s benefit programs are crafted to offer meaningful coverage for both you and your family. Please reach out to your Human Capital Business Partner for more detailed information on specific benefits.<ul><li>Outperform expectations</li><li>Challenge Convention</li><li>Champion Opportunity</li><li>Lead responsibly</li><li>Drive collaboration</li></ul>As One Apollo team, we believe that doing great work and having fun go hand in hand, and we are proud of what we can achieve together. Pay Range$190,00 - $250,000Apollo Global Management, Inc. (together with its subsidiaries and affiliates) is committed to championing opportunity.The firm and its affiliates comply with applicable discrimination and equal opportunities legislation in all of its jurisdictions and do not discriminate in employment or recruitment based on race, color, religion, gender, national origin, veteran status, disability, age, citizenship, marital or domestic/civil partnership status, sexual orientation, gender identity or expression or any other protected characteristic under applicable law.The contents of the qualifications and experience section of this job description are a guideline only. If an applicant can otherwise demonstrate their suitability for the role they will be considered.The base salary range for this position is listed above. This position is also eligible for a discretionary annual bonus based on personal, team, and Firm performance. Compensation ranges are based on several factors including job function, level, and geographic location. Final offer amounts are determined by multiple factors including candidate experience and expertise, and may vary from the amounts listed here.

<h5>Apollo aims to be a leading provider of flexible and long-duration capital enabling the energy transition. </h5>Apollo’s Sustainable Investing Platform leverages our deep experience across asset classes to deploy capital in key sectors driving the energy transition and decarbonization. The scale and breadth of this opportunity is significant, and across asset classes, Apollo sees the opportunity to deploy, commit, or arrange more than $100 billion by 2030.Since 2022, Apollo-managed funds have deployed, committed or arranged over $59 billion¹ into energy transition, infrastructure and sustainability-related investments, supporting companies and projects across infrastructure, wind, solar, storage and renewable fuels, as well as a wide range of technologies to facilitate decarbonization. Apollo has also played an active role in helping finance the transformation of certain traditional energy companies.

Lead Application Security Engineer

Position OverviewAt Apollo, we’re a global team of alternative investment managers passionate about delivering uncommon value to our investors and shareholders. With over 30 years of proven expertise across Private Equity, Credit and Real Estate, regions and industries, we’re known for our integrated businesses, our strong investment performance, our value-oriented philosophy – and our people.We are seeking a Director of Application Security to join Apollo’s global Cyber Security &amp; Risk team within Engineering. This leader will define and drive the firm’s application security strategy—strengthening secure development practices, architecture, and runtime environments across a diverse, expanding portfolio.You will oversee the design and operation of a scalable application security program, partnering closely with engineering, security, and business teams to embed security throughout the software lifecycle.Primary Responsibilities<ul><li>Application Threat Modeling: Lead threat modeling for new and existing applications to identify risks, recommend mitigations, and ensure control alignment with enterprise standards.</li><li>Application Design &amp; Architecture: Guide teams in secure design principles, validate adherence to security controls, and ensure threat models inform architectural decisions.</li><li>Secure SDLC Development &amp; Implementation: Define and implement secure development lifecycle (SDLC) processes and tools—including SAST, SCA, and secret scanning—and drive adoption across development teams.</li><li>Operationalization of Security Tools: Integrate and maintain security tooling to streamline analysis, reporting, and remediation workflows throughout the software lifecycle.</li><li>Application Security Awareness &amp; Enablement: Build and sustain a security champion program, fostering developer engagement and ensuring teams understand secure coding practices and delivery expectations.</li><li>Application Security Testing: Conduct regular code reviews and application assessments to identify vulnerabilities and guide timely remediation.</li><li>Governance, Risk, and Compliance: Establish governance frameworks to ensure compliance with internal security policies, industry standards, and regulatory requirements. Monitor, report, and continuously improve the firm’s compliance posture.</li></ul>Qualifications &amp; Experience<ul><li>10+ years of hands-on experience in Application Security, with a strong background in software development (IDE/CLI environments).</li><li>Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field.</li><li>Demonstrated success partnering with software development teams to provide security oversight across complex application ecosystems.</li><li>Proven expertise with IDEs, version control systems, CI/CD pipeline management, secure SDLC practices, and SaaS-based security tools (SCA, SAST, DAST) as well as application inventory management.</li><li>Experience with Snyk and GitHub is highly desirable.</li><li>Strong understanding of application architecture, security controls, cloud environments, and penetration testing methodologies.</li><li>Exceptional collaboration and critical thinking skills, with the ability to operate effectively in a fast-paced, dynamic environment.</li><li>Familiarity with leading security standards and frameworks (OWASP, NIST, ISO 27001, MITRE ATT&amp;CK) and testing tools such as Burp Suite.</li><li>Experience working within or alongside regulated industries (e.g., financial services) and understanding their impact on application security practices.</li><li>Ongoing commitment to staying informed on emerging threats and trends to proactively enhance security measures.</li><li>Professional certifications such as CISSP, CSSLP, CASE, GWEB, or MCSA/MCSE are strongly preferred</li></ul>About ApolloApollo is a high-growth, global alternative asset manager. In our asset management business, we seek to provide our clients excess return at every point along the risk-reward spectrum from investment grade to private equity with a focus on three investing strategies: yield, hybrid, and equity. For more than three decades, our investing expertise across our fully integrated platform has served the financial return needs of our clients and provided businesses with innovative capital solutions for growth. Through Athene, our retirement services business, we specialize in helping clients achieve financial security by providing a suite of retirement savings products and acting as a solutions provider to institutions. Our patient, creative, and knowledgeable approach to investing aligns our clients, businesses we invest in, our employees, and the communities we impact, to expand opportunity and achieve positive outcomes.Our Purpose &amp; Core ValuesOur clients rely on our investment acumen to help secure their future. We must never lose our focus and determination to be the best investors and most trusted partners on their behalf. We strive to be:The leading provider of retirement income solutions to institutions, companies, and individuals.The leading provider of capital solutions to companies. Our breadth and scale enable us to deliver capital for even the largest projects – and our small firm mindset ensures we will be a thoughtful and dedicated partner to these organizations. We are committed to helping them build stronger businesses.A leading contributor to addressing some of the biggest issues facing the world today – such as energy transition, accelerating the adoption of new technologies, and social impact – where innovative approaches to investing can make a positive difference.We are building a unique firm of extraordinary colleagues who:As One Apollo team, we believe that doing great work and having fun go hand in hand, and we are proud of what we can achieve together.Our BenefitsApollo relies on its people to keep it a leader in alternative investment management, and the firm’s benefit programs are crafted to offer meaningful coverage for both you and your family. Please reach out to your Human Capital Business Partner for more detailed information on specific benefits.<ul><li>Outperform expectations</li><li>Challenge Convention</li><li>Champion Opportunity</li><li>Lead responsibly</li><li>Drive collaboration</li></ul>As One Apollo team, we believe that doing great work and having fun go hand in hand, and we are proud of what we can achieve together. Pay Range$190,00 - $250,000Apollo Global Management, Inc. (together with its subsidiaries and affiliates) is committed to championing opportunity.The firm and its affiliates comply with applicable discrimination and equal opportunities legislation in all of its jurisdictions and do not discriminate in employment or recruitment based on race, color, religion, gender, national origin, veteran status, disability, age, citizenship, marital or domestic/civil partnership status, sexual orientation, gender identity or expression or any other protected characteristic under applicable law.The contents of the qualifications and experience section of this job description are a guideline only. If an applicant can otherwise demonstrate their suitability for the role they will be considered.The base salary range for this position is listed above. This position is also eligible for a discretionary annual bonus based on personal, team, and Firm performance. Compensation ranges are based on several factors including job function, level, and geographic location. Final offer amounts are determined by multiple factors including candidate experience and expertise, and may vary from the amounts listed here.

Lead Application Security Engineer

About the Job

About the Company

Apollo

Similar Jobs

Senior Product Security Engineer

Senior Product Security Engineer

Senior Enterprise Application Security Engineer

Senior Enterprise Application Security Engineer

Third Party Risk Manager

Third Party Risk Manager

Cybersecurity Lead

Cybersecurity Lead

Director of Information Security

Director of Information Security

Principal, Security Engineer SOC

Principal, Security Engineer SOC

Principal, Security Engineer

Principal, Security Engineer

Senior Security Engineer

Senior Security Engineer

Security Engineer

Security Engineer

Information Security Engineer

Information Security Engineer