Senior Detection & Response Engineer - 100% remote
Apollo.ioâ˘Zdalnie
đ° Wynagrodzenie
WideĹki nieujawnione
đ Informacje
đ Wymagane technologie
đ Opis gĹĂłwny / WstÄp
Role Overview
The Security Operations Engineer is a senior individual contributor responsible for detecting, investigating, and responding to security threats across Apolloâs cloud-native and SaaS environments. This role requires strong technical depth, independent judgment, and ownership of complex security investigations from intake through resolution.
This role operates in a fully remote environment and emphasizes clear written communication, operational rigor, and effective collaboration.
Key ResponsibilitiesIncident Detection, Investigation & Response
- Monitor, triage, and investigate security alerts and events across cloud infrastructure, SaaS applications, and corporate systems.
- Conduct end-to-end security investigations, including scoping, containment, eradication, recovery, and documentation.
- Own investigations independently while collaborating effectively during high-severity incidents.
SIEM, Detection & Workflow Engineering
- Configure and maintain SIEM detections in Panther, including use cases, correlation rules, alert logic, and tuning.
- Onboard, validate, and maintain log sources to ensure visibility, accuracy, and reliability.
- Design and improve investigation and response workflows to streamline triage, escalation, and resolution.
- Leverage AI-assisted tools to accelerate alert analysis, enrichment, and investigation efficiency.
Threat Hunting & Proactive Security
- Perform proactive threat-hunting activities to identify malicious or anomalous behavior not surfaced by existing detections.
- Investigate abuse, fraud, account compromise, and automation misuse scenarios in close collaboration with Fraud teams.
- Identify detection gaps and propose, implement, and validate improvements.
Automation, Coding & Tooling
- Build scripts, automations, and tools to reduce manual work and improve response speed and consistency.
- Use Python extensively for analysis, automation, and internal tooling; Ruby experience is a plus.
- Contribute to internal detection frameworks, tooling, and shared libraries.
Documentation & Continuous Improvement
- Produce clear, high-quality documentation for incidents, investigations, and post-incident reviews.
- Contribute to runbooks, playbooks, and operational standards.
- Share knowledge, review peer work, and mentor other engineers.
Development opportunities we offer
- development budget
- industry-specific e-learning platforms
- intracompany training
- technical knowledge exchange within the company
We are AI Native
Apollo.io is an AI-native company built on a culture of continuous improvement. Weâre on the front lines of driving productivity for our customersâand we expect the same mindset from our team. If you're energized by finding smarter, faster ways to get things done using AI and automation, you'll thrive here.
What Youâll Love About Apollo
Besides the great compensation package and culture that thrives in openness and excellence, we invest tremendous effort into developing our remote employeesâ careers. The team embraces that we have a sole purpose: to help customers maximize their full revenue potential on the Apollo platform. This mindset opens us up to a lot of creative approaches to making customers successful at scale. Youâll be a significant part of a lean, remote team, empowered to really own your role as a proactive educator. Weâre very collaborative at Apollo, so youâll be able to lean on your teammates, even in adjacent departments, to help you achieve lofty goals. Youâll be supported and encouraged to experiment and take educated risks that lead to big wins. And, youâll have a whole team remotely by your side to help you do it!