Staff Engineer, Detection and Response
Core
Lead detection and response (D&R) strategy and hands-on engineering for Apollo's Security team, building detection systems, response automations, and investigation tools to catch and contain real threats.
Role type
Staff Engineer, Detection and Response (Security)
Builds
Detection systems, response automations, investigation tools, and AI-augmented workflows for a global SaaS platform.
Domain
Cybersecurity, Cloud Security, SaaS Security
Deliverable
production ML models
Required skills
Detection and response strategy, detection engineering, incident response leadership, detection architecture design, Python, Git, CI/CD, detection-as-code, cloud security, SaaS security, threat hunting, AI-assisted triage and response, influence without authority, sound judgment with incomplete information
Preferred skills
Staff/Lead/Principal-level experience at high-growth cloud/SaaS companies, AI-assisted triage/investigation/response in production, public security work or certifications (GCIA, GCIH, GCED)
Technologies
Panther, Python, GCP, Kubernetes, Docker, Terraform, Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Snowflake, Claude, Claude Code, Cursor, Glean
Responsibilities
Own D&R strategy and turn it into multi-quarter initiatives; set D&R standards (detections as code, playbooks, AI workflows); own detection architecture and coverage plan; run the detection lifecycle (intake, prioritization, testing, simulation); lead high-severity incidents as technical lead or commander; improve incident response plans and readiness; mentor engineers and raise the hiring bar; measure IR quality and feed lessons back into detections and automation
Seniority
Staff, hands-on IC with strategy and mentorship
