Senior Security Analyst (MDR-Israel)
Artemis · Remote · Israel · New York City ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Analyst
- Fully remote (Israel)
- AI-driven MDR platform
- Founding team member
- 4+ years SOC experience
Join Artemis as a founding analyst for Apollo, the managed detection and response layer of their AI-native cybersecurity platform. You will handle complex investigations across cloud, identity, and endpoint environments, leveraging AI agents to accelerate threat detection and response.
This role offers the chance to define investigative standards and response protocols as the team scales. You will work directly with engineering teams to turn field insights into product improvements, protecting Fortune 500 customers from advanced threats.
What you'll do
- Lead end-to-end investigations from initial signal to final resolution
- Determine impact, blast radius, and severity for security incidents
- Reconstruct attacker activity across identity, cloud, and SaaS telemetry
- Execute containment actions within customer-authorized limits
- Communicate findings and recommendations directly to customers
- Conduct hypothesis-driven threat hunts to uncover hidden risks
- Shape investigative standards and response workflows for the service
- Feed investigation patterns back into detection engineering and product
What you'll need
- 4+ years in SOC, MSSP, or MDR at senior or Tier 3 level
- Deep investigation experience with identity, cloud, endpoint, and SaaS
- Strong knowledge of MITRE ATT&CK framework and attacker TTPs
- Ability to distinguish suspicious activity from confirmed threats
- Experience using AI-assisted investigation tools with critical judgment
- Strong customer-facing skills for guiding clients during incidents
- Excellent written communication for clear customer reporting
- Comfortable working defined shifts in a 24x7 coverage model
Nice to have
- Experience in multi-tenant MDR or MSSP environments
- Proficiency in writing detection rules like Sigma, YARA-L, or KQL
- Background in incident command and executive briefings
- Dedicated experience in threat hunting or DFIR
- Daily use of AI or agentic coding tools for personal tooling
Stack
- Okta
- Entra ID
- AWS
- Azure
- GCP
- Microsoft 365
- Google Workspace
- MITRE ATT&CK
- Sigma
- YARA-L
- SPL
- KQL
How you'll work
- Fully remote position based in Israel
- Defined shift work as part of 24x7 analyst coverage
- Collaborative environment with engineering and product teams
What you get
- Opportunity to shape service design as a founding analyst
- Work on active defense for Fortune 500 and Global 2000 companies
- Exposure to diverse environments and attacker behaviors
- High-autonomy culture with focus on mentorship and learning
- Direct impact on product development through field insights