SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Artemis is an AI-driven cybersecurity platform company that has raised $70M and is one of the fastest-growing cybersecurity companies, with Fortune 500 and Global 2000 customers. The company is building AI agents to detect, investigate, hunt, and respond to threats at machine speed across cloud, identity, endpoint, and SaaS environments.
You will join Apollo, Artemis's managed detection and response (MDR) service, as a founding Senior Security Analyst. This is a hands-on role where you own investigations from initial signal through resolution. The Artemis platform is designed to handle routine detection and investigation work, freeing your time for expert-level analysis and decision-making.
Key responsibilities include: taking cases from pickup to close and establishing verdicts; reconstructing attacker activity across identity, cloud, endpoint, and SaaS telemetry; recommending and executing containment actions with customer authorization; working at the speed threats demand and prioritizing by risk; serving as the trusted security voice to customers; running hypothesis-driven threat hunts; helping design the Apollo service and investigative standards; and feeding your verdicts and patterns into detection engineering and product.
As a founding analyst, you will shape how the service operates, the standards the team holds, and what customers receive. You will work across the full spectrum of environments and attacker behavior, building fluency in modern tradecraft faster than single-environment roles allow. Your analysis directly influences product improvements and detection engineering.
The role requires working a defined shift as analyst coverage expands to 24x7 coverage.
QUALIFICATIONS:
- 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at a senior or Tier 3 level where investigations ended with your decision
- Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
- Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
- Rigor about evidence: ability to distinguish suspicious from confirmed and know exactly what is needed to close that gap
- Hands-on experience with AI-assisted investigation or automation, with judgment about where it is strong and where it needs human expertise
- Strong customer-facing instincts and experience walking affected parties through live security situations
- Excellent written communication skills
- High personal bar for analysis quality and preference for being measured on it
- Comfortable working defined shifts as coverage expands to 24x7
BONUS QUALIFICATIONS:
- Experience in multi-tenant MDR or MSSP practice across multiple customer environments
- Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
- Incident command experience including customer executive briefings
- Dedicated threat hunting or DFIR background
- Daily hands-on use of AI or agentic coding tools to build custom tooling
