jobapplier

Staff Engineer (Detection and Response)

Apollo.io

Skills

Required

  • Cloud
  • detection engineering / security engineering / incident response
  • detection architecture
  • GCP
  • Google Workspace
  • Okta
  • GitHub
  • Slack
  • Atlassian
  • Cloudflare
  • CrowdStrike
  • Python
  • Git

Preferred

  • detection content
  • open-source tools
  • GCIA / GCIH / GCED
  • D&R
  • Build detection systems
  • IR
  • overseeing complex incidents

Join Apollo's Security team as a Staff Engineer (Detection and Response). You will lead the D&R strategy, build detection systems, response automations, and investigation tools. You will also set standards and architecture for the team, mentor engineers, and own the detection architecture and observability. Additionally, you will run the detection lifecycle, improve the incident response plan, and measure IR quality. This role offers remote and in-person options, flexible time off, competitive pay, and global healthcare coverage.

Responsibilities

  • Lead the detection and response (D&R) strategy for Apollo’s Security team, delivering hands-on implementation and overseeing complex incidents.
  • Build detection systems, response automations, and investigation tools, ensuring rapid deployment and effectiveness.
  • Set the standards and architecture for detection and response, mentoring engineers and driving multi-quarter initiatives tied to Security Key Results.
  • Experience leading high-severity incidents in cloud and SaaS environments and improving the IR process behind them

Requirements

  • 8+ years in detection and response, detection engineering, security engineering or incident response
  • Track record of leading D&R strategy or multi-quarter initiatives with measurable results
  • Cloud and SaaS expertise, ideally GCP, plus familiarity with tools like Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji and Snowflake
  • Sound judgment with incomplete information, and the influence to align technical and non-technical leaders without formal authority
  • Hands-on experience designing detection architecture and shipping detection systems on a modern SIEM (Panther highly valued)

Strong Python, Git, CI/CD and detection-as-code skills

  • Staff, Lead or Principal-level experience at a high-growth cloud or SaaS company
  • AI-assisted triage, investigation or response in production, with a clear view of its limits

Preferred

  • Public security work (detection content, open-source tools, talks, research) or certifications such as GCIA, GCIH or GCED

Pay

USD 225,400 - 281,800

Every job at Apollo.io