[Hiring] MDR Lead @Artemis

Role Description

We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.

• Start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself.
• As the team grows, hire, coach, and lead analysts, and set the standards they work to.
• Work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.

Responsibilities

• Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs.
• Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management.
• Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS.
• Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end.
• Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact.
• Hire, onboard, and grow the MDR analyst team as demand scales.
• Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source.
• Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews.
• Set on-call and coverage policies that are sustainable for the team.

Qualifications

• 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function.
• Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs.
• Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure.
• Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment.
• Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL.
• Clear communicator who can brief customers and executives during active incidents.
• Comfortable making decisions with incomplete information and owning the outcome.
• Fluent in English (Hebrew is a plus).

Nice to Have

• Prior experience at an MDR provider or a managed security services team.
• Experience selling into or supporting enterprise customers during security escalations.
• Background in detection engineering or threat hunting.
• Experience building runbooks or automation that reduced analyst workload.
• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent.