Senior Security Analyst (MDR-Australia)

Artemis · Remote · Australia ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior Security Analyst
  • Fully remote (Australia)
  • AI-driven MDR platform
  • Founding team member
  • Shift-based coverage

Join Artemis as a founding analyst for Apollo, the managed detection and response service built on their AI-native platform. You will handle complex security incidents across cloud, identity, and endpoint environments, leveraging AI tools to accelerate investigation while applying expert judgment to determine impact and guide customer response.

What you'll do

  • Own end-to-end case investigation from pickup to final verdict and closure
  • Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry
  • Recommend and execute containment actions within customer-authorized limits
  • Communicate directly with customers to explain threats and recommended next steps
  • Conduct hypothesis-driven threat hunts to identify unalerted risks
  • Help define investigative standards, workflows, and reporting structures
  • Feed investigation insights back into detection engineering and product development

What you'll need

  • 4+ years of senior-level SOC, MSSP, or MDR experience
  • Deep investigation skills across Okta, Entra ID, AWS, Azure, GCP, and EDR
  • Strong knowledge of MITRE ATT&CK framework and attacker TTPs
  • Experience using AI-assisted investigation tools with critical judgment
  • Excellent written communication skills for customer-facing reports
  • Comfortable working defined shifts to support 24x7 coverage

Nice to have

  • Experience in multi-tenant MDR or MSSP environments
  • Proficiency in writing detection rules using Sigma, YARA-L, SPL, or KQL
  • Incident command experience including executive briefings
  • Dedicated background in threat hunting or DFIR
  • Daily use of AI or agentic coding tools for personal tooling

Stack

  • AWS
  • Azure
  • GCP
  • Okta
  • Entra ID
  • Microsoft 365
  • Google Workspace
  • EDR
  • Sigma
  • YARA-L
  • SPL
  • KQL

How you'll work

  • Role based in Australia
  • Defined shift work required
  • Part of 24x7 analyst coverage model

What you get

  • Opportunity to shape service standards as a founding analyst
  • Work with AI-native platform reducing routine manual tasks
  • Exposure to diverse attacker behaviors and environments
  • Collaborative culture with mentorship and open communication