Staff Engineer, AI-Driven Detection & Incident Response

Apollo.io; Oregon; Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity

401(k)

Paid holidays

Flex PTO

Parental leave

EAP

Wellbeing benefits

Global travel coverage

Job summary

Apollo.io seeks an experienced leader to own Detection & Response strategy and drive multi-quarter initiatives across our security stack. You will engineer detections and automations, mentor engineers, and raise the bar for incident response in a cloud/SaaS environment.

You will work with cross-functional teams to embed telemetry, logging, and response readiness into roadmaps, while advancing AI-native detection and secure operations across Apollo's platform.

Qualifications

• 8+ years in detection and response, detection engineering or IR.
• Track record leading D&R strategy or multi-quarter initiatives with measurable results.
• Hands-on experience designing detection architecture and shipping systems on a modern SIEM (Panther highly valued).
• Strong Python, Git, CI/CD and detection-as-code skills.
• Experience leading high-severity incidents in cloud/SaaS; improving IR processes.
• Cloud and SaaS expertise, ideally GCP; familiarity with Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Snowflake.

Responsibilities

• Own D&R strategy and turn it into multi-quarter initiatives tied to Security KRs.
• Work with Engineering, Infrastructure and IT to plan logging, telemetry and response readiness.
• Set D&R standards: detections and response as code, review practices, playbooks and AI-assisted workflows.
• Mentor engineers to own detections and lead incidents, and raise the hiring bar.
• Develop and ship MITRE ATT&CK-aligned detections, threat hunts and automations in Panther and Python via Git/CI/CD.
• Own and improve the IR plan: severity model, roles, escalation, comms, on-call and playbooks.

Skills

Detection & response

Detection engineering

Python

Git

CI/CD

Cloud & SaaS

Tools

Panther SIEM

Google Workspace

Okta

GitHub

Slack

Atlassian

Cloudflare

CrowdStrike

Kandji

Snowflake

Job description

Apollo.io seeks an experienced leader to own Detection & Response strategy and drive multi-quarter initiatives across our security stack. You will engineer detections and automations, mentor engineers, and raise the bar for incident response in a cloud/SaaS environment.

You will work with cross-functional teams to embed telemetry, logging, and response readiness into roadmaps, while advancing AI-native detection and secure operations across Apollo's platform.