Engineering Manager, Security Detection & Response

Role Overview

Apollo is looking for a technical Engineering Manager to lead our Security Detection & Response function. This role is responsible for managing engineers while building and scaling the technical systems behind modern security operations, including detection engineering, Panther content, telemetry onboarding, Python-based automation, and CI/CD workflows for security tooling. This is a hands-on leadership role for someone who can coach a team, make sound engineering decisions, and stay close to the technical details.

This role operates in a fully remote environment and requires excellent asynchronous communication and collaboration skills.

Key Responsibilities

Security Incident Leadership & Response

• Own and continuously improve end-to-end detection, investigation, response, post-incident review, and threat intelligence-informed improvement processes, including AI-assisted triage and investigation workflows.
• Lead complex and high-severity incidents with clear decision-making, effective stakeholder communication, and accountable follow-through on remediation.
• Stay technically engaged in investigations across cloud infrastructure, SaaS platforms, corporate systems, user behavior, and abuse scenarios, and translate incident learnings, platform changes, and threat trends into Security Detection & Response priorities.

Security Observability, Detection Engineering, Automation & AI

• Define and evolve security observability and detection strategy, including telemetry onboarding, signal quality, threat intelligence inputs, alert tuning, and coverage validation.
• Oversee Panther detections, MITRE ATT&CK-aligned use cases, investigation playbooks, and response automations, with measurement and validation loops for coverage, precision, latency, tuning effectiveness, safe rollout, and attack-simulation-based validation.
• Transform security operations processes through practical use of AI, including designing agents and AI-native workflows for triage, enrichment, investigation, and response.
• Drive Python-based tooling, CI/CD practices, and pragmatic use of AI to improve the speed, quality, and reliability of Security Detection & Response workflows.