apollo-graphql - Staff Security Operations Engineer
Requirements
• Experienced in application security — familiar with OWASP, threat modeling, secure code review, and API security patterns • Comfortable contributing to or reviewing code, and knows how to work with developers in ways that actually improve security culture (not just file findings) • Has shipped developer-facing security tooling or guardrails — things engineers actually use • Skilled at both cloud security controls (AWS, GCP) and application-layer security — understands the full stack from infrastructure up through the API and application layer • Comfortable working directly with engineers to embed operational security practices into their workflows • Strong communicator who can explain threats and mitigations clearly to both technical and non-technical audiences • Excited about the intersection of AI and security, with ideas for how to safely harness AI while managing its risks • Motivated by outcomes - not just solving incidents, but building resilient systems and reducing risk at scale • 6+ years in security engineering, spanning both application security and security operations • Strong foundation in AppSec: threat modeling, SAST/DAST, dependency management, secure SDLC practices • Deep expertise with detection and response in cloud-native environments • Experience building and automating security tooling (scripting/programming language, SIEM, SOAR, or AppSec tooling) • Proven ability to partner with engineering teams to improve security posture with while minimizing the impact on delivery times • Track record of influencing security culture across an engineering organization • Strong knowledge of SOC 2, ISO 27001, or similar security frameworks • Proven ability to lead or coordinate incident response across multiple teams • Track record of influencing operational security culture and practices without direct authority • Experience working with AI security - either in detection, incident response, or product security contexts • Prior experience supporting enterprise customer audits or due diligence processes • Familiarity with Terraform, Kubernetes, or other modern infrastructure stacks • Hands-on experience with threat hunting and detection engineering • Experience securing GraphQL APIs, federation, or API gateway patterns • Familiarity with software supply chain security (SBOM, Sigstore, dependency auditing) • Prior work on security champions programs or developer security education
Responsibilities
• Partner with engineering teams to conduct threat modeling and security reviews on new features and architecture changes • Establish and evolve Apollo's application security program including SAST/DAST tooling, dependency scanning, and secure coding standards • Drive security requirements into the SDLC, embedding security gates into CI/CD pipelines • Identify and remediate vulnerabilities in Apollo's products and APIs, with a focus on reducing systemic risk rather than one-off fixes • Act as a security advisor for product teams building customer-facing features, particularly those involving authentication, authorization, and data handling • Advance Apollo’s detection and response strategy in partnership with engineering and IT leadership • Implement and maintain adherence to SOC 2 and other cloud security frameworks • Handle escalations from Sales and Customer Success • Build and tune monitoring, logging, and alerting systems to improve visibility while reducing noise • Drive automation of SecOps workflows to speed up investigation and response • Guide secure adoption of AI across Apollo - from internal use by engineers to AI-powered product features • Participate in our on-call rotation (we keep this lightweight and reasonable)
Benefits
• FOR NON-VARIABLE PAY • At Apollo, we strive to provide competitive, market-informed compensation whilst ensuring consistency within the team in each country. We make hiring decisions based on your skills, experience, and our overall assessment of what we learned during the hiring process. • In addition to the U.S. base salary range, we also provide equity and benefits. Apollo offers all U.S. employees a choice of 3 Anthem Blue Cross medical plans and California residents can also choose from an additional 2 Kaiser medical plans. Dental and Vision benefits are provided by Sun Life Financial. • FOR VARIABLE PAY • In addition to the U.S. base salary range, we also provide variable compensation, equity, and benefits. Apollo offers all U.S. employees a choice of 3 Anthem Blue Cross medical plans and California residents can also choose from an additional 2 Kaiser medical plans. Dental and Vision benefits are provided by Sun Life Financial. • Location: This is a remote position that can be done from anywhere in COUNTRY NAMES [add any time zone or travel requirements]. • Location: • Equal Opportunity: Apollo is proud to be an equal opportunity workplace dedicated to pursuing and hiring a talented and diverse workforce. • Equal Opportunity: • E-Verify: Apollo is an E-Verify employer and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. For more information please visit E-Verify. • E-Verify: • Upload your resume here to autofill key application fields. • Drop your resume here! • Parsing your resume. Autofilling key fields... • or drag and drop here • Please include city, state, and country. • We want ensure your salary expectations are in line with the posted range for the role. • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT