[Hiring] Security Operations Engineer @Apollo GraphQL

Role Description

As a senior member of Apollo’s Security Operations team, you’ll bring deep technical expertise and a collaborative mindset to help us protect and scale our infrastructure securely. This is a high-impact opportunity to shape how SecOps evolves - from detection engineering and incident response, to compliance, automation, and AI security. You’ll work directly with teams across Apollo to reduce risk, meet customer expectations, and ensure that security operations remain a foundation of trust as we scale.

• Advance Apollo’s detection and response strategy in partnership with engineering and IT leadership
• Implement and maintain adherence to SOC 2 and other cloud security frameworks
• Handle escalations from Sales and Customer Success, including security questionnaires and customer audits
• Build and tune monitoring, logging, and alerting systems to improve visibility while reducing noise
• Drive automation of SecOps workflows to speed up investigation and response
• Guide secure adoption of AI across Apollo - from internal use by engineers to AI-powered product features
• Participate in our on-call rotation (we keep this lightweight and reasonable)

Qualifications

• A highly experienced SecOps engineer with a strong background in detection, response, and operational security
• Skilled at building and operating modern cloud security controls across AWS, GCP, or similar environments
• Comfortable working directly with engineers to embed operational security practices into their workflows
• Strong communicator who can explain threats and mitigations clearly to both technical and non-technical audiences
• Excited about the intersection of AI and security, with ideas for how to safely harness AI while managing its risks
• Motivated by outcomes - not just solving incidents, but building resilient systems and reducing risk at scale

Requirements

• 6+ years of experience in security operations, incident response, or related fields, including at least 2 years in a staff or senior-level role
• Deep expertise with detection and response in cloud-native environments
• Strong knowledge of SOC 2, ISO 27001, or similar security frameworks
• Experience building and automating security tooling (SIEM, SOAR, custom scripts)
• Proven ability to lead or coordinate incident response across multiple teams
• Track record of influencing operational security culture and practices without direct authority

Nice to have

• Experience working with AI security - either in detection, incident response, or product security contexts
• Prior experience supporting enterprise customer audits or due diligence processes
• Familiarity with Terraform, Kubernetes, or other modern infrastructure stacks
• Hands-on experience with threat hunting and detection engineering