Ares Management
The complete job description, requirements, and application details are available on the original posting.
Ares Management Corporation is a prominent global alternative investment manager based in Los Angeles, California. Founded in 1997, the firm has grown to manage approximately $546–596 billion in assets across North America, Europe, Asia Pacific, and the Middle East, employing around 4,200 people. Ares focuses on delivering compelling risk-adjusted returns through well-structured investments in high-quality businesses and real estate assets. The company operates through four main business units: Credit, Private Equity, Real Estate, and Infrastructure/Special Situations. Ares provides flexible capital solutions, including direct lending and private debt, equity investments, and real estate management. It also offers a range of investment vehicles, such as publicly traded entities and private funds, catering to institutional investors and business partners. Ares is recognized for its collaborative approach, enhancing deal flow and market insights across its investment platform.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
The AppSec function resides within the Ares Technology and Information Security Group. Jared Nussbaum serves as Partner and Chief Information Security Officer. The team emphasizes building secure-by-default tooling, CI/CD integration, and cloud security controls across AWS, Azure, and GCP. As of, there are 2 active AppSec job postings. Publicly documented AppSec org structure (size, embedded vs centralized beyond CISO reporting) is not publicly available.
Key Initiatives
Ares is implementing shift-left practices through integration of security scanning into CI/CD pipelines. Automated security tasks include vulnerability scanning, SAST/SCA/DAST integration, and secrets detection directly in CI/CD pipelines. A recent major initiative involves developing foundational controls for AI/ML, including LLM usage governance. The organization employs automated guardrails as part of its Secure SDLC approach. Specific vulnerability management triage/ticketing SLAs and MTTR information are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Ares Management's site