Staff Engineer, Security Operations

Career Tools

About This Role

Apollo.io is a global go-to-market platform serving revenue teams, ranging from fast-growing startups to large enterprises. Founded in 2015, the organization provides verified B2B contact data alongside engagement and conversion utilities within a single system. The company is backed by prominent investors and maintains a rapidly scaling SaaS business model. The organization seeks a Staff Engineer, Security Operations to spearhead detection and response functions. This position suits an experienced security…

Job Description

Responsibilities

• Own the detection and response strategy and map multi-quarter initiatives directly to security key results.
• Partner with IT, Infrastructure, and Engineering to ensure telemetry and logging are integrated into product roadmaps.
• Establish security standards covering detection as code, response playbooks, review practices, and AI-driven workflows.
• Design detection architecture spanning log sources, correlation, enrichment, alert routing, and cost management at scale.
• Manage the complete detection lifecycle including intake, unit testing, historical replays, attack simulation, and tuning.
• Deploy detections, automation scripts, and threat hunting routines using Python and Panther within Git and CI/CD pipelines.
• Direct the incident response plan, severity model, escalation paths, and on-call rotations.
• Coordinate tabletop exercises alongside Legal, Engineering, Fraud, and executive leadership teams.
• Lead high-severity security incidents as the primary technical lead or incident commander across SaaS and cloud environments.
• Implement AI-augmented triage, investigation, and response mechanisms with human-in-the-loop guardrails.

Requirements

• Minimum of eight years of professional experience working in incident response, detection engineering, or security engineering.
• Demonstrated history of steering detection and response strategies and driving measurable multi-quarter initiatives.
• Hands-on background creating detection architecture and deploying systems on a modern SIEM platform, with Panther experience highly valued.
• Advanced proficiency in Python, Git, continuous integration and deployment pipelines, and detection-as-code practices.
• Practical experience managing high-severity incidents within cloud and SaaS infrastructures and refining post-incident procedures.
• Familiarity with cloud environments such as Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, and Snowflake.

Qualifications

• Staff, Lead, or Principal level experience acquired at a fast-growing cloud or Software-as-a-Service company.
• Production-level experience utilizing AI-assisted investigation, triage, or response tools with an understanding of their limitations.
• Public security contributions including open-source tools, detection content, research papers, or speaking engagements.
• Professional certifications such as GCIA, GCIH, or GCED.

Core Skills

Benefits

• Equity options
• Company bonus plan
• 401(k) plan
• At least 10 paid holidays annually
• Flexible paid time off and parental leave
• Employee assistance program and wellbeing benefits
• Global travel coverage
• Life, AD&D, short-term disability, and long-term disability insurance
• FSA and HSA accounts alongside medical, dental, and vision insurance

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.