Senior Security Analyst; MDR

Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

We're backed by First Round Capital, Brightmind, and a group of the cybersecurity industry's most prominent Operators.

Our founders, Shachar (ex-Palo Alto Networks, AWS, Demisto) and Dan (ex-Abnormal Security, Twitter) have previously built, launched, and scaled cybersecurity products loved and trusted by tens of thousands of customers, and have the customer, technology, and security know-hows to deliver this vision.

Our exceptionally strong team includes software engineers, AI researchers, security engineers, and product designers hailing from Google, Abnormal AI, Wiz, Meta, AWS, CERN, Sentinel One, and more.

We are growing our team and looking for passionate builders to join us and support our expanding customer base.

We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on: the people who determine what a threat really is, what it means for that business, and what happens next. You will be one of the few who establish how that work gets done before the team scales.

The Artemis platform is built to give you the strongest possible starting position. Detections are written for each customer's environment, cases arrive with the investigation done and the evidence assembled, response actions come staged and impact-checked, and the platform already holds a living picture of every user, device, account, and AI agent in the environment. The routine work that fills most analysts' days is handled, which means your day is spent on the work that actually calls for an expert.

You will lead investigations across cloud, identity, endpoint, and SaaS, own the decision on the cases you take, guide customers through what matters and why, and carry incidents from first signal to a clean resolution. Because you work across the full range of environments we protect, you will build fluency in modern attacker tradecraft far faster than a single environment allows.

And your reach extends well past the case. You sit with the engineers building the platform, so what you learn in one investigation can ship into the product and go on protecting every customer we defend.

• Own the investigation and the decision - Take cases from pickup to close: establish what happened, determine the impact and blast radius, set the verdict and severity, and put your reasoning on the record. You are the one who makes the call.

• Investigate with real depth - Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry: initial access, lateral movement, persistence, and exfiltration. Pair AI-assisted investigation with hands‑on log analysis, and know which one to lean on for what.

• Drive response, with the customer in control - Recommend and execute containment within each customer's authorized limits, with every action impact-previewed and reversible before it runs. Where the decision belongs to the customer, bring them the recommended action, its full impact, and a clear next step.

• Move at the speed the threat demands - Work by risk, acknowledge and reach a verdict inside the response targets for each severity, and keep the most consequential work moving first.

• Be the security partner customers trust - You are the voice the customer hears. Your summaries, your reasoning, and your final analysis reach them in your own words.

• Hunt what nothing has alerted on yet - Run hypothesis-driven and AI-assisted threat hunts across customer environments, and turn what you surface into new cases and new detections.

• Help design the service, not just deliver it - Founding analysts shape what Apollo becomes: the investigative standards, the response workflows, the reporting customers receive, and the console the team works in. You will be in the room where those decisions get made, and the improvements you argue for get built.

• Make the platform sharper - Your verdicts, your reasoning, and the patterns you recognize feed straight into detection engineering and product, so a problem you solve once gets engineered away rather than worked twice.

• 4+ years of hands‑on security operations experience in a SOC, MSSP, or MDR environment
  , at a senior or Tier 3 level where the…