[Hiring] Senior Security Analyst @Artemis

Role Description

We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on:

• Determine what a threat really is, what it means for that business, and what happens next.
• Establish how that work gets done before the team scales.

The Artemis platform is built to give you the strongest possible starting position:

• Detections are written for each customer's environment.
• Cases arrive with the investigation done and the evidence assembled.
• Response actions come staged and impact-checked.
• The platform holds a living picture of every user, device, account, and AI agent in the environment.
• Routine work that fills most analysts' days is handled, allowing you to focus on expert-level tasks.

You will lead investigations across cloud, identity, endpoint, and SaaS:

• Own the decision on the cases you take.
• Guide customers through what matters and why.
• Carry incidents from first signal to a clean resolution.
• Build fluency in modern attacker tradecraft.
• Collaborate with engineers to improve the platform based on your investigations.

Responsibilities

• Own the investigation and the decision: Take cases from pickup to close, establish what happened, determine the impact and blast radius, set the verdict and severity, and document your reasoning.
• Investigate with real depth: Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry.
• Drive response, with the customer in control: Recommend and execute containment within each customer's authorized limits.
• Move at the speed the threat demands: Work by risk and prioritize consequential work.
• Be the security partner customers trust: Communicate your findings and reasoning clearly to customers.
• Hunt what nothing has alerted on yet: Conduct hypothesis-driven and AI-assisted threat hunts.
• Help design the service, not just deliver it: Shape investigative standards, response workflows, and reporting.
• Make the platform sharper: Feed your findings into detection engineering and product improvements.

Qualifications

• 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment at a senior or Tier 3 level.
• Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace).
• Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK).
• Rigor about evidence: know what separates suspicious from confirmed.
• Hands-on experience with AI-assisted investigation or automation.
• Strong customer-facing instincts.
• Excellent written communication skills.
• A high personal bar for the quality of your analysis.
• Comfortable working a defined shift as analyst coverage expands to 24x7.

Bonus

• Experience in a multi-tenant MDR or MSSP practice.
• Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar).
• Incident command experience, including customer executive briefings.
• Dedicated threat hunting or DFIR background.
• Daily hands-on use of AI or agentic coding tools.

Benefits

• Join early enough to shape the service.
• Make a real-world impact with every case you work.
• Gain experience across a full set of environments and attacker behaviors.
• Be challenged to learn and grow in a high-caliber team.
• Push the boundaries of technology in an AI-native SOC.
• Experience an innovative culture focused on customer obsession and open communication.