Engineering Manager, Security Detection & Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and enhance the end-to-end processes for detection, investigation, response, post-incident reviews, and improvements informed by threat intelligence, including AI-assisted triage and investigation workflows.

• Lead complex, high-severity incidents with decisive decision-making, effective communication with stakeholders, and responsible follow-through on remediation efforts.

• Remain technically involved in investigations spanning cloud infrastructure, SaaS platforms, corporate systems, user behavior, and abuse scenarios, while converting incident insights, platform modifications, and threat trends into priorities for Security Detection & Response.

• Define and refine the strategy for security observability and detection, which includes onboarding telemetry, ensuring signal quality, integrating threat intelligence, tuning alerts, and validating coverage.

• Manage Panther detections, use cases aligned with MITRE ATT&CK, investigation playbooks, and response automations, incorporating measurement and validation processes for coverage, precision, latency, tuning effectiveness, safe deployment, and validation based on attack simulations.

• Innovate security operations processes through the practical application of AI, including the design of agents and AI-native workflows for triage, enrichment, investigation, and response.

• Propel Python-based tools, CI/CD practices, and the pragmatic application of AI to enhance the speed, quality, and reliability of Security Detection & Response workflows.

• Build, lead, and maintain a high-performing remote team in Security Detection & Response, with clear expectations, robust onboarding, thorough documentation, and effective knowledge-sharing practices.

• Mentor engineers to develop their technical expertise, operational ownership, and leadership skills, while closely collaborating with Engineering, IT, Fraud, Legal, People, Support, and Product teams on incidents, investigations, and security enhancements.

• Collaborate intensively with Engineering and Infrastructure on telemetry quality, data pipelines, and operational readiness, while clearly conveying security risks, incident impacts, and remediation strategies to both technical and non-technical stakeholders.

• Establish and evaluate metrics and reporting aligned with strategy that assess the effectiveness of Security Detection & Response, highlight trends and gaps, and guide priorities and decisions for stakeholders.

⛳️ Requirements

• Minimum of 5 years of experience in Security Detection & Response, Security Engineering, or Incident Response.

• At least 2 years of experience in people management, encompassing hiring, coaching, and performance management, preferably in a remote-first setting.

• Strong hands-on experience with contemporary SIEM platforms, security observability, detection engineering, log analysis, and intricate security investigations; familiarity with Panther is highly regarded.

• Proficient in Python for automation, analysis, and internal tooling, maintaining technical credibility with engineers.

• Experience with automation, Git-based workflows, CI/CD practices, threat intelligence-informed detections, AI-assisted workflows, and the development of agents or AI-native workflows for security content, tooling, or response processes.

• Knowledge of cloud-native platforms, security telemetry, and SaaS environments; experience with GCP is preferred. Familiarity with tools similar to Apollo's, including Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Panther, and Snowflake-backed log pipelines, is highly valued.

• Outstanding written and verbal communication skills, along with strong leadership and stakeholder management abilities.

🏝️ Benefits

• Equity

• Company bonus or sales commissions/bonuses

• 401(k) plan

• Minimum of 10 paid holidays each year

• Flexible PTO

• Parental leave

• Employee assistance program and wellbeing benefits

• Global travel coverage

• Life/AD&D/STD/LTD insurance

• FSA/HSA and medical, dental, and vision benefits