Senior Security Engineer

THE OPPORTUNITY

Apollo Research works with most frontier AI companies (OpenAI, Anthropic, Google, Meta, Thinking Machines and others) to test their models before deployment and collaborate on fundamental scheming research. Our coding agent security product, Watcher, is deployed in production and monitors billions of agent tokens per month across engineering teams at agent-building scale-ups and enterprises. 

Security exists at Apollo to safeguard the trust our lab partners place in us and to enable that research. Our own team runs around 400 billion tokens a month through AI agents, which makes Apollo both a target and a testbed. We’re hiring Security Engineers to join the Infra & Security Team. 

In this role, you will design, implement, and deploy the security controls that keep Apollo secure, and make the secure path the default path for everyone. You will build the security layer for a novel insider risk that didn't exist before.

RESPONSIBILITIES

• Design, build, and operate Apollo's core security controls: identity and access management, infrastructure and cloud security, endpoint management, and incident response.

• Build paved roads that make the secure path the default, easy path

• Establish and advocate for security practices across Apollo, and build the organizational trust needed for people to adopt them, communicating security decisions and tradeoffs clearly along the way.

• Evaluate vendors and tooling, make build-vs-buy calls on security infrastructure, and assess vendor security posture before adoption.

• Lead major security projects end to end, from ideation through implementation and rollout.

• Collaboratively define and shape the security roadmap and priorities.

REPRESENTATIVE PROJECTS

Zero trust migration: Design and deliver an incremental path from Apollo's current cloud architecture toward zero trust, including hands-on implementation and deployment reducing the blast radius if any single credential, device, or agent is compromised.

Agentic SOC: Design and build an internal agentic SOC from scratch; automate triage and investigation of security alerts so detection coverage scales with Apollo's growing use of AI agents.

Sandbox hardening: Review Apollo's sandboxing infrastructure; propose and implement changes that improve security while minimizing impact on researcher productivity. 

Third-party access review: Implement a lean, streamlined access review process for third-party software that people will actually use.

Incident response: Lead an incident response effort end to end: containment, root cause, and the post-mortem that turns it into a durable fix.

Pentesting tooling: Decide which agentic pentesting solution Apollo will use, and whether to build or buy.

ABOUT THE TEAM

The Infra and Security team is currently led by Rusheb Shah and consists of Glen Rodgers and Steven Lee. You will work closely with Security Researchers we’re hiring for as well as technical staff from the Scheming Research and Product team. You can find our full team here.

Must-haves

Nice-to-haves

Explicitly not required

BENEFITS

This role offers market competitive salary, equity, and competitive benefits.

Salary: San Francisco: $214,000 – $280,000; London: £144,000 – £189,000. We will be looking to meaningfully raise salaries soon.  

Our engineers effectively have an unlimited token budget. If a better result costs more compute, use it.

Flexible work hours and schedule

Unlimited vacation

Unlimited sick leave

Up to 6 months of paid parental leave

Comprehensive health, dental and vision insurance

Retirement savings with competitive employer matching (e.g. 401(k) for US employees)

Lunch, dinner, and snacks are provided for all employees on workdays

Paid work trips, including staff retreats, business trips, and relevant conferences

A yearly $1,000 (USD) professional development budget

Relocation support and visa fees (if applicable)