Staff Security Engineer — AI‑Driven D&R & Incident Leader

OpenKrill; United States; Remote; USD 184,000 - 265,000; Full time

Benefits offered by this job

Equity

Company bonus or sales commissions

401(k)

Paid holidays

Flexible PTO

Wellbeing benefits

Travel coverage

Life/AD&D/STD/LTD insurance

FSA/HSA and health benefits

Job summary

Apollo.io is seeking an experienced leader to own detection and response strategy for its Security team. You will build detections, automation and investigation tools and lead the most complex incidents.

You will set architecture and standards enabling scalable, AI‑augmented D&R without reliance on any single person. You’ll work across engineering and IT to embed logging and response readiness in roadmaps, ship MITRE ATT&CK aligned detections, and guide incident response with best practices for

Qualifications

• 8+ years in detection and response, or related security engineering roles.
• Proven track record leading D&R strategy or multi‑quarter initiatives.
• Hands‑on design of detection architectures and SIEM deployments (Panther preferred).
• Strong Python, Git, CI/CD and detection‑as‑code capabilities.
• Experience leading IR for cloud/SaaS environments and improving processes.

Responsibilities

• Own D&R strategy and translate into multi‑quarter initiatives tied to security KR's.
• Architect detections, observability, logging and alerting at scale.
• Lead high‑severity incidents as senior tech lead or incident commander.
• Define AI‑augmented D&R standards and guardrails for safe automation.
• Mentor engineers to own detections and improve playbooks and reviews.

Skills

Security leadership

D&R strategy

Detection architecture

Python

Git

CI/CD

Detection-as-code

Cloud and SaaS security

Tools

Panther

Python

GitHub

CI/CD

GCP

Google Workspace

Okta

Slack

Atlassian

Cloudflare

CrowdStrike

Kandji

Snowflake

Job description

Apollo.io is seeking an experienced leader to own detection and response strategy for its Security team. You will build detections, automation and investigation tools and lead the most complex incidents.

You will set architecture and standards enabling scalable, AI‑augmented D&R without reliance on any single person. You’ll work across engineering and IT to embed logging and response readiness in roadmaps, ship MITRE ATT&CK aligned detections, and guide incident response with best practices for