Staff Engineer, Security Operations
Apollo.io
Posted: 10/21/2026ApolloCloudGoogle Cloud PlatformPython
Network Operations Security Engineer
AXON Networks
Posted: 10/21/2026CloudDNSFirewallsGoogle Cloud PlatformKubernetesPythonTCP/IP
SOC Analyst
Thrive
Posted: 10/21/2026Cyber SecurityDNSLinuxSMTPSwitchingTCP/IPUnix
Senior Security Analyst, SOC
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
Security Operations Administrator
Mission Technologies, a division of HII
Posted: 10/20/2026Security Analyst, SOC
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
Risk Management Framework, Cyber Security Ops
Apogee Engineering, LLC
Posted: 10/20/2026Cyber SecurityTypeScript
Security Operations Analyst, Tier 2
Aristocrat
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxPython
Security Operations Engineer II
Credit Acceptance
Posted: 10/19/2026CloudCyber Security
Security Operations Analyst II
Rapid7
Posted: 10/19/2026LinuxMacOSSplunk
Security Operations Team Lead
Cyera
Posted: 10/17/2026AWSCloudPython
Lead SOC Engineer
OnTrac
Posted: 10/17/2026AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython
Lead SOC Engineer
OnTrac
Posted: 10/17/2026AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython
Security Operations Engineer
Collectors
Posted: 10/16/2026AWSAzureCloudEC2Google Cloud PlatformPython
Security Operations, Security Engineering
Rochester Regional Health
Posted: 10/16/2026
SOC Analyst I
AMERICAN SYSTEMS
Posted: 10/16/2026CloudCyber SecurityDNSLinuxSplunkTCP/IPUnix
SOC Analyst II
AMERICAN SYSTEMS
Posted: 10/16/2026CloudCyber SecurityDNSSplunkTCP/IP
Senior Business Analyst – Cyber Operations
EY
Posted: 10/16/2026SDLCSQL
Manager, Security Operations – Incident Response
Davis Polk & Wardwell LLP
Posted: 10/15/2026Cyber Security
Vice President – Infrastructure and Security Operations
CBIZ
Posted: 10/15/2026AWSAzureCloudServiceNow
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in detection and response strategy, with hands-on experience in building detection systems and automations. Proficient in leading high-severity incidents and improving incident response processes across cloud and SaaS environments.
Highest-signal resume keywords
Detection And Response StrategyDetection Architecture DesignPython ProgrammingCloud And SaaS ExpertiseIncident Response Leadership
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Lead detection and response strategy for Apollo’s Security team and deliver it hands-on
- Build detection systems, response automations and investigation tools
- Lead complex and high-severity incidents across cloud, SaaS and corporate systems
- Own D&R strategy and translate it into multi-quarter initiatives tied to Security KRs
- Report progress and risks to leadership in business terms
- Coordinate with Engineering, Infrastructure and IT on logging, telemetry and response readiness
- Set D&R standards for detection and response as code, review practices, playbook quality and AI-assisted workflows
- Mentor engineers and help raise the hiring bar
- Own detection architecture and multi-quarter coverage planning
- Manage security observability, telemetry onboarding, signal quality, threat intelligence inputs and alert tuning
- Run the detection lifecycle, including intake, prioritization, unit tests, historical replay, attack simulation and coverage reviews
- Ship MITRE ATT&CK-aligned detections, threat hunts and automations in Panther and Python via Git and CI/CD
- Own and improve the incident response plan, severity model, roles, escalation, communications, on-call and playbooks
- Conduct tabletop exercises with Engineering, Legal, Fraud and leadership
- Build response automation and forensic readiness
- Measure MTTA, MTTR, repeat incidents and action closure
- Use AI and agents for triage, enrichment, investigation and response with appropriate guardrails
- Define detection approaches for misuse of Apollo’s AI systems and agent features
Requirements
What you’ll need- 8+ years in detection and response, detection engineering, security engineering or incident response
- Track record of leading D&R strategy or multi-quarter initiatives with measurable results
- Hands-on experience designing detection architecture and shipping detection systems on a modern SIEM; Panther highly valued
- Strong Python, Git, CI/CD and detection-as-code skills
- Experience leading high-severity incidents in cloud and SaaS environments and improving the IR process behind them
- Cloud and SaaS expertise, ideally GCP
- Familiarity with Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji and Snowflake
- Sound judgment with incomplete information
- Ability to influence technical and non-technical leaders without formal authority
Benefits
Comp & perks- Equity
- Company bonus or sales commissions/bonuses
- 401(k) plan
- At least 10 paid holidays per year
- Flex PTO
- Parental leave
- Employee assistance program
- Wellbeing benefits
- Global travel coverage
- Life insurance
- AD&D insurance
- STD insurance
- LTD insurance
- FSA/HSA
- Medical benefits
- Dental benefits
- Vision benefits
- Resources, support, and autonomy for professional growth
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Detection EngineeringSecurity EngineeringIncident ResponseDetection-As-CodeSIEMThreat IntelligenceAlert TuningAttack SimulationMTTA MeasurementMTTR Measurement
Soft Skills
Sound JudgmentInfluencing Leaders
Tools & Technologies
PantherGitCI/CDGoogle WorkspaceOktaGitHubSlackAtlassianCloudflareCrowdStrike
Industry Keywords
Security KRsForensic ReadinessDetection LifecycleTabletop ExercisesMulti-Quarter Initiatives