SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Artemis is building AI-driven cybersecurity defense technology, backed by First Round Capital and Brightmind, with founders from Palo Alto Networks, AWS, Demisto, Abnormal Security, and Twitter. The company is hiring a Senior Security Analyst to join Apollo, its managed detection and response (MDR) service, as a founding analyst.
In this role, you will be one of the senior security minds customers rely on to determine what threats are real, what they mean for the business, and what response is needed. You'll establish investigative standards and workflows before the team scales, working with a platform designed to handle routine detection and investigation work so you can focus on expert-level analysis and decision-making.
Key responsibilities include: owning investigations from pickup to close across cloud, identity, endpoint, and SaaS environments; reconstructing attacker activity using AI-assisted investigation paired with hands-on log analysis; recommending and executing containment actions with full impact preview; working at the speed threats demand and meeting response targets by severity; serving as the trusted security voice to customers with clear reasoning and analysis; running hypothesis-driven threat hunts to surface new cases; shaping Apollo's investigative standards, workflows, and console design; and feeding your verdicts and patterns into detection engineering so problems get engineered away rather than worked repeatedly.
You'll work across the full range of modern attack surfaces—initial access, lateral movement, persistence, and exfiltration—and build fluency in attacker tradecraft faster than single-environment roles allow. Your work directly influences product development, and you'll sit with engineers to ensure insights from investigations ship into the platform.
The role emphasizes founding-team impact: you'll help define what an AI-native SOC looks like, establish the standards new analysts learn from, and protect real companies and the people who depend on them. You'll have autonomy to drive investigations, shape the platform, and own outcomes rather than follow runbooks.
REQUIREMENTS:
- 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at senior or Tier 3 level, where investigations ended with your decision
- Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
- Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
- Rigor about evidence: ability to distinguish suspicious from confirmed and know exactly what is needed to close that gap
- Hands-on experience with AI-assisted investigation or automation, with judgment about where it is strong and where it needs human expertise
- Strong customer-facing instincts and experience walking affected people through live security situations
- Excellent written communication; your writing reaches customers as you wrote it
- High personal bar for analysis quality and preference for being measured on it
- Comfort working defined shifts as analyst coverage expands to 24x7
BONUS:
- Experience in multi-tenant MDR or MSSP practice across several customer environments
- Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
- Incident command experience including customer executive briefings
- Dedicated threat hunting or DFIR background
- Daily hands-on use of AI or agentic coding tools to build custom tooling
