Remote Security Detection & Response Engineering Lead

Apollo.io; United States; Remote; USD 225,400 - 281,800; Full time

Benefits offered by this job

Equity

401(k) plan

Health benefits

Job summary

Apollo is seeking an Engineering Manager to lead the Security Detection & Response function in a fully remote role in the United States. You will coach engineers, guide incident response, and shape security observability, telemetry onboarding, and AI‑driven tooling.

The role demands hands‑on technical leadership while coordinating with cross‑functional teams to improve security outcomes. You will oversee detections, playbooks, and CI/CD workflows, driving measurable improvements in detection

Qualifications

• 5+ years of experience in Security Detection & Response, Security Engineering, or Incident Response.
• 2+ years of people management experience, including hiring and performance management, ideally remote‑first.
• Strong hands‑on experience with modern SIEM platforms, security observability, detection engineering, log analysis, and investigations; Panther valued.
• Strong proficiency in Python for automation, analysis, and internal tooling.
• Experience with automation, Git‑based workflows, CI/CD practices, threat intelligence informs detections, and AI‑assisted workflows.
• Experience with cloud‑native platforms, security telemetry, SaaS environments; GCP preferred.
• Familiarity with tools like Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Panther, and Snowflake‑backed log pipelines.

Responsibilities

• Own and improve end‑to‑end detection, investigation, response, post‑incident review, and threat intel‑informed improvements.
• Lead complex, high‑severity incidents with clear decisions and remediation accountability.
• Translate incident learnings into SDR priorities across platforms and teams.
• Define evolving security observability, telemetry onboarding, and alert tuning strategies.
• Oversee Panther detections, MITRE ATT&CK aligned use cases, and response playbooks with validation loops.
• Drive Python‑based tooling, CI/CD practices, and AI‑native workflows for security content and tooling.
• Coach engineers, collaborate with Engineering, IT, Fraud, Legal, People, Support, Product.
• Define metrics and reporting to show SDR effectiveness and trends.

Skills

Python automation

Detection engineering

People management

ATT&CK knowledge

Cloud security

Incident response

Tools

Panther

GitHub

CI/CD tooling

Google Workspace

Okta

Slack

Atlassian

Cloudflare

CrowdStrike

Kandji

Snowflake

Job description

Apollo is seeking an Engineering Manager to lead the Security Detection & Response function in a fully remote role in the United States. You will coach engineers, guide incident response, and shape security observability, telemetry onboarding, and AI‑driven tooling.

The role demands hands‑on technical leadership while coordinating with cross‑functional teams to improve security outcomes. You will oversee detections, playbooks, and CI/CD workflows, driving measurable improvements in detection