SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
7AI is a foundational AI security company founded in 2024 by Cybereason co-founders, backed by $166M in funding from Index Ventures and Blackstone. The company emerged from stealth in February 2025 with a platform that pairs federated SIEM with AI agents capable of detecting, investigating, responding to, and hunting threats, complemented by dedicated threat hunting and threat intelligence services with humans in the loop.
As a Tier 3 Security Analyst, you will serve as the technical lead and escalation point for junior analysts reviewing AI agent investigations. Your core responsibilities include validating the accuracy and completeness of investigations completed by 7AI's AI agents, evaluating risk, and proving out the threats they stopped. You will correlate data from multiple sources—cloud, endpoint, identity, network, and others—to understand the full picture of malicious activity and investigate complex attacks that agents have responded to.
You will use advanced AI agents to hunt in customer environments, detect and remediate emerging threats, and contribute findings back into product development. During incidents, you'll assist customers with threat monitoring, triage, and prioritization of security alerts. You'll proactively identify potential threats and anomalies by reviewing logs and malicious findings, and communicate findings to customers ranging from SOC analysts to CISOs, adapting your technical depth accordingly.
You will also architect processes to scale the operation sustainably while maintaining quality, mentor junior analysts, and collaborate with Sales, Engineering, and Product teams to optimize the AI platform based on customer experience feedback. Staying current with emerging cybersecurity trends, vulnerabilities, new attack techniques, and AI-driven attacks is essential.
REQUIREMENTS:
- 5+ years of experience in cybersecurity operations
- Hands-on experience investigating alerts across multiple sources (endpoint, network, identity, email, cloud, etc.)
- Strong understanding of security monitoring tools (XDR, SIEM, IDS/IPS, IDP, etc.)
- Familiarity with log and telemetry concepts
- Experience analyzing and investigating security alerts from intrusion detection systems, network monitoring tools, and endpoint protection platforms
- Strong knowledge of common attack techniques and frameworks (MITRE ATT&CK) and incident triage methodologies
- Strong analytical and problem-solving skills with ability to verify AI-driven analysis and make independent security decisions
- Data querying experience with SIEM querying technologies (SPL, KQL, FQL, SQL, etc.)
- Strong knowledge of malware analysis methods
- Great interpersonal skills with service-oriented mindset
- Proven track record of successful team collaboration, including mentorship skills and ability to teach complex concepts
NICE TO HAVE:
- Prior experience in a Managed Services environment
- Incident handling experience
- Relevant certifications: Security+, GSEC, GCIH
