SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Artemis is an AI-driven cybersecurity platform that uses AI agents to detect, investigate, hunt, and respond to threats at machine speed. The company is one of the fastest-growing cybersecurity companies, backed by $70M in funding from top-tier VCs and operators including the CEO of CrowdStrike and former leaders from Splunk and Palo Alto Networks.
You will join Apollo, Artemis's managed detection and response (MDR) service, as a founding senior security analyst. In this role, you will be one of the few establishing how the MDR service operates before the team scales. You will own investigations from initial signal through resolution, working across cloud, identity, endpoint, and SaaS environments.
Key responsibilities include: taking cases from pickup to close and making the final verdict on what happened and its impact; reconstructing attacker activity across multiple telemetry sources using both AI-assisted investigation and hands-on log analysis; recommending and executing containment actions with full impact preview; working at the speed threats demand and prioritizing by risk; serving as the trusted security voice to customers; running hypothesis-driven threat hunts; helping design the Apollo service and investigative standards; and feeding your findings into detection engineering and product to improve the platform.
You will work closely with platform engineers, so insights from your investigations directly influence product development. The platform handles routine detection and investigation work, freeing your time for expert judgment, response decisions, and customer partnership. You will establish investigative standards, response workflows, and reporting that the team follows as it grows.
This is a founding analyst role with significant influence over how the service is built and delivered. You will be measured on the quality of your analysis and have autonomy to drive investigations and shape outcomes.
REQUIREMENTS:
- 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at a senior or Tier 3 level where investigations ended with your decision
- Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
- Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
- Rigor about evidence: ability to distinguish suspicious from confirmed and know exactly what is needed to close that gap
- Hands-on experience with AI-assisted investigation or automation, with judgment about where it is strong and where it needs human expertise
- Strong customer-facing instincts and experience walking affected parties through live security situations
- Excellent written communication skills
- High personal bar for analysis quality and preference for being measured on it
- Comfort working defined shifts as analyst coverage expands to 24x7
BONUS QUALIFICATIONS:
- Experience in multi-tenant MDR or MSSP practice across multiple customer environments
- Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
- Incident command experience including customer executive briefings
- Dedicated threat hunting or DFIR background
- Daily hands-on use of AI or agentic coding tools to build custom tooling
