Ares Management
Vice President, Cybersecurity Engineer - AI Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Ares Management
Ares Management Corporation is a prominent global alternative investment manager based in Los Angeles, California. Founded in 1997, the firm has grown to manage approximately $546–596 billion in assets across North America, Europe, Asia Pacific, and the Middle East, employing around 4,200 people. Ares focuses on delivering compelling risk-adjusted returns through well-structured investments in high-quality businesses and real estate assets. The company operates through four main business units: Credit, Private Equity, Real Estate, and Infrastructure/Special Situations. Ares provides flexible capital solutions, including direct lending and private debt, equity investments, and real estate management. It also offers a range of investment vehicles, such as publicly traded entities and private funds, catering to institutional investors and business partners. Ares is recognized for its collaborative approach, enhancing deal flow and market insights across its investment platform.
Security at Ares Management
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Ares Management's AppSec philosophy centers on strategy and visibility, with Zero Trust framed as a foundational strategy.
- The approach emphasizes building guardrails rather than manual gates, focusing on secure-by-default tooling and CI/CD guardrails.
- The team bridges security, dev, and ops cultures and frames security in business terms rather than technical metrics.
- Key priorities include automation of security tasks and AI governance, with an emphasis on developer enablement over gatekeeping.
Security Team
The AppSec function resides within the Ares Technology and Information Security Group. Jared Nussbaum serves as Partner and Chief Information Security Officer. The team emphasizes building secure-by-default tooling, CI/CD integration, and cloud security controls across AWS, Azure, and GCP. As of, there are 2 active AppSec job postings. Publicly documented AppSec org structure (size, embedded vs centralized beyond CISO reporting) is not publicly available.
Key Initiatives
Ares is implementing shift-left practices through integration of security scanning into CI/CD pipelines. Automated security tasks include vulnerability scanning, SAST/SCA/DAST integration, and secrets detection directly in CI/CD pipelines. A recent major initiative involves developing foundational controls for AI/ML, including LLM usage governance. The organization employs automated guardrails as part of its Secure SDLC approach. Specific vulnerability management triage/ticketing SLAs and MTTR information are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.