Staff Engineer, Security Operations

What you'll do

• Set D&R strategy, architecture, standards, and multi-quarter coverage plans; align engineering and infrastructure teams on telemetry and response readiness.
• Build and maintain detections, threat hunts, automations, and incident response processes; lead high-severity incidents and improve readiness and measurement.
• Establish AI-augmented D&R workflows and help detect misuse of Apollo’s AI systems and agent features.

What they ask for

• 8+ years in detection and response, detection engineering, security engineering, or incident response.
• Track record leading D&R strategy or multi-quarter initiatives with measurable results.
• Hands-on experience designing detection architecture and shipping detection systems on a modern SIEM; Panther highly valued.
• Strong Python, Git, CI/CD, and detection-as-code skills; experience leading high-severity incidents in cloud and SaaS environments.

Nice to have

• Staff, Lead, or Principal-level experience at a high-growth cloud or SaaS company; production experience with AI-assisted triage, investigation, or response.
• Public security work or certifications such as GCIA, GCIH, or GCED.

Pay

$211,600 — $264,500 USD total cash compensation inclusive of annual base salary and annual bonus as applicable; $184,000 — $230,000 USD total cash compensation inclusive of annual base salary and annual bonus as applicable

Tools

Panther, Python, Git, CI/CD, GCP, Kubernetes, Docker, Terraform

AI focus

Use AI and agents for triage, enrichment, investigation, and response, with guardrails and human oversight; measure impact and help detect misuse of Apollo’s AI systems and agent features.