Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
Artemis ingests and analyzes exabytes of streaming data from cloud platforms, identity providers, network logs, and more. We’re building a new, large-scale data platform from the ground up - and we’re looking for exceptional Software Engineers to help shape and build it. You’ll work alongside engineers who architected some of the world’s biggest distributed systems.
This is a high-impact role with significant ownership. You’ll work across critical parts of the system - from customer-facing experiences to large-scale data and analytics infrastructure - depending on your strengths and the problems at hand.
You will help define architecture, make key technical decisions, and drive projects from concept through production. This role is for engineers who are comfortable operating in ambiguity, care deeply about quality, and want to build systems that matter.
Responsibilities
Own and deliver major product and platform initiatives - Design, build, and ship end-to-end features and systems that power Artemis’ detection, analytics, and customer experience.
Build and scale distributed systems - Work on services and pipelines that ingest, process, and analyze massive volumes of security telemetry with high reliability and performance.
Contribute across the stack - Depending on the problem, this may include backend services, APIs, data infrastructure, or user-facing applications. You’re not boxed into a single layer.
Make architectural decisions - Evaluate trade-offs, influence technical direction, and help ensure the system remains scalable, secure, and maintainable as we grow.
Bring strong engineering judgment - Balance speed and quality, know when to iterate and when to invest, and raise the bar for code, design, and operational excellence.
Collaborate deeply - Work closely with product, design, security, and AI/ML teams to turn complex problems into usable, reliable solutions.
Leverage AI-native development practices - We actively use AI tools to increase velocity and quality. You’ll be expected to embrace and evolve how we build software in an AI-first environment.
Qualifications
6+ years of professional software engineering experience building and operating production systems.
Strong experience in backend development (e.g., Python, Go, or similar) and designing APIs and services.
Experience building or working with distributed systems, data pipelines, or large-scale platforms.
Familiarity with cloud infrastructure (AWS, GCP, or Azure) and modern deployment practices (containers, orchestration, CI/CD).
Ability to reason about performance, reliability, and scalability in real-world systems.
Product and customer mindset - you care why you’re building something, not just how.
Clear communicator who can collaborate across disciplines and mentor other engineers.
Bonus:
Frontend experience with React / TypeScript.
Experience with data platforms (Kafka, ClickHouse, Snowflake, BigQuery, etc.).
Background in cybersecurity, observability, or large-scale analytics systems.
Why Work at Artemis?
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive projects and support to grow.
If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.
Compensation
We offer a competitive compensation of $180,000 - $250,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a Security Research Engineer to drive detection research, threat hunting, and AI-powered security automation. You'll work at the intersection of security expertise and cutting-edge AI—researching data sources, building detections, investigating real incidents, and engaging directly with customers to deliver security value. This is a hands-on, high-impact role where your work directly shapes what threats we catch and how we catch them.
Responsibilities
Develop AI-powered detection tooling - Build automation that leverages AI to accelerate detection creation, tuning, and validation at scale.
Conduct security research - Analyze cloud, identity, and SaaS data sources (AWS CloudTrail, Okta, Entra ID, and more) to extract security value and identify detection opportunities.
Perform attack simulations - Execute authorized attack simulations to validate detection coverage and identify gaps in our defenses.
Hunt for threats - Proactively search for malicious activity across customer environments using our platform and tooling.
Investigate potential cases - Analyze security incidents to demonstrate product value, refine detection logic, and deliver actionable findings.
Engage with customers - Join customer calls to present analysis results, walk through findings, and gather feedback that shapes the product.
Tune customer detections - Reduce false positives and improve detection accuracy based on real-world data and customer context.
Build investigation automation - Create AI-powered tools that scale investigation and threat hunting workflows across our platform.
Qualifications
7+ years of hands-on cybersecurity experience
Hands-on experience in incident response including cloud environments (AWS, Azure, GCP) and identity providers (Okta, Entra ID)
Strong knowledge of threat actor tactics, techniques, & procedures and demonstrated understanding uncovering threat actor activity in various environments
Strong experience with log-based analysis and demonstrated ability to identify malicious activity across a variety of log sources
Ability to translate security research into actionable detections or threat hunt investigations
Strong communication skills—comfortable explaining technical findings to engineers and customers
Experience with detection engineering at scale
Bonus:
Background working in a SOC environment or Managed Detection and Response.
Familiarity with a wide range of security tools (SIEM, EDR, SOAR)
Customer-facing technical experience
Experience with AI tools and models
Why Work at Artemis?
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity, including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorshi,p and learning. You will have autonomy to drive projects and support to grow.If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.
If you are passionate about cybersecurity and want to apply your expertise to build AI-powered defenses against advanced threats, we'd love to hear from you.
Compensation
We offer a competitive compensation of 180,000$- 220,000$ per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We are looking for a Product Engineer who combines technical excellence with a strong eye for product experience.
You will own major features of our customer-facing portal, turning complex security data into AI-Native and intuitive interfaces that enable security analysts to make the right decisions quickly. You will partner with product managers, designers, and our customers to bring this vision to life.
This role is ideal for an engineer who enjoys shipping with high velocity, moving seamlessly between front‑end and back‑end, and cares deeply about user experience. You will work primarily with TypeScript/React for the front‑end and Python & Go on the back‑end.
Responsibilities
Ship core product features across the entire stack – from React components and design‑system primitives to performant Python & Go back‑end services and APIs. You will own features from concept to deployment.
Bring product thinking to engineering. Ask why features matter, how they support our product vision, and how to measure success. Help shape our product by providing insights from an engineering perspective.
Optimize performance and responsiveness. Ensure the portal remains snappy even when displaying large amounts of data.
Embrace, advocate, and utilize AI-powered engineering practices. As an AI-Native company we seek to continuously improve how we build our product with higher velocity with the usage of AI - running 5 concurrent Claude Code terminals is common here.
Collaborate across disciplines. Work closely with security engineers, AI/ML researchers and product design to bring new capabilities into the user experience.
Qualifications
You’ve founded or co-founded a tech company and built product yourself.
4+ years of professional experience building full‑stack web applications. You have built, shipped and maintained user‑facing products at scale.
Expertise in modern front‑end technologies (React, TypeScript, CSS). You care about the craft of building a great product experience.
Proficiency in back‑end development with Python and/or Go and experience designing REST or GraphQL APIs. Familiarity with databases (relational and NoSQL) and cloud services (AWS, GCP or Azure).
Product and design intuition. You can empathize with users, make design trade‑offs and contribute to product strategy.
Excellent collaboration and communication skills. You can work across disciplines and explain technical concepts to non‑engineers.
Bonus:
Background in cybersecurity, observability, or large-scale analytics systems.
Why Work at Artemis?
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive projects and support to grow.
If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.
Compensation
We offer a competitive compensation of $180,000 - $250,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
As a Founding Product Manager at Artemis, you will shape the vision, strategy, and roadmap for our AI-native cybersecurity platform. You'll work directly with our co-founders and across engineering, design, security, and AI/ML to turn Artemis' technical capabilities into products that change how companies defend themselves.
We're looking for someone who is energized by ambiguity, deeply curious about the frontier of AI, and passionate about building products that elegantly balance technical depth with intuitive user experiences. You'll need to be both hands-on with prototyping and comfortable translating complex detection and analytics systems into clear, human-centered solutions that security practitioners actually want to use.
Own the vision, strategy, and roadmap for core areas of the Artemis platform - from detection and analytics to agentic workflows.
Drive high-velocity execution with a world-class team of engineers and designers, balancing principled intuition with data-driven decision making.
Marry customer insights with technical possibilities - deeply understand the workflows of CISOs, SOC analysts, and security engineers, and craft intuitive experiences that abstract away the complexity of large-scale security data.
Prototype using tools like Claude Code and Cursor to accelerate the product development and provide clarity to your vision.
Write evals, together with our engineering and research, in order to ensure the product meets customer needs
Bring insights from AI research, cybersecurity trends, and the evolving threat landscape and apply to Artemis' product.
Contribute to the evolution of Artemis' product practices as we scale and grow the team.
Minimum 3 years of product management experience.
Prior experience as a software engineer or security engineer strongly preferred
Must: At least 2 of work years in a SIEM, SOAR, or threat detection cybersecurity vendor.
Passion for AI, shown through hands-on building, prototyping, or side projects, and staying current on research and tools.
Fluency with core LLM concepts and systems - prompting, embeddings, retrieval, and evals - and the judgment to translate these into reliable, user-facing products.
BA/BS in a technical or analytical field (e.g., Computer Science, Engineering, Information Systems, Analytics, Mathematics, Physics, Applied Sciences, or related).
Strong customer empathy and design thinking - especially for technical end users who are skeptical of tools that don't respect their expertise.
Fluency with modern engineering tools and design tools (e.g. Claude Code, Cursor, Figma).
Fluency in data and experimentation, and understanding when the answer cannot be found in the data.
Proven ability to lead small, cross-functional teams toward ambitious goals with urgency and agency.
Ability to translate between technical and non-technical audiences, synthesizing complex systems into compelling narratives.
Excellent communication and storytelling skills.
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive projects and support to grow.
If you are passionate about cybersecurity and want to apply your expertise to build AI-powered defenses against advanced threats, we'd love to hear from you.
Compensation
We offer a competitive compensation of 200,000$-250,000$ per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a Security Analyst to be at the core of what we do: reviewing real security cases across customer environments, recommending outcomes, and continuously improving the detection logic that powers our platform. This role sits at the intersection of hands-on SOC work and modern AI-assisted security operations — you'll develop deep expertise in cloud, identity, and SaaS threats while directly shaping the detection content and investigation workflows that protect our customers.
Responsibilities
Review and triage security cases - Investigate alerts and cases surfaced by the Artemis platform across cloud, identity, endpoint, and SaaS environments. Analyze the underlying logs and evidence to determine whether activity is malicious, benign, or a false positive.
Recommend and document case outcomes - Provide clear, well-reasoned verdicts (true positive, false positive, benign confirmed) with supporting evidence and written justifications that feed directly into customer-facing reports and product improvement loops.
Build and refine detections - Write new detection logic and tune existing rules to improve signal quality. Work directly in the detection layer to reduce noise, close coverage gaps, and surface threats that matter.
Fix and maintain the detection library - Identify misfiring or noisy detections through case review and fix them. Own the quality of the detection content you touch from initial triage through to shipped improvement.
Conduct threat hunting - Proactively investigate customer environments for signs of attacker activity that automated detections may have missed, using both structured hypothesis-driven hunting and AI-assisted workflows.
Investigate security incidents - Perform deeper triage on escalated or complex cases, piecing together attacker timelines and identifying lateral movement, persistence, or exfiltration across data sources.
Contribute to investigation playbooks - Document investigation techniques, artifact patterns, and case patterns as structured playbooks that help scale consistent, high-quality analysis across the team.
Engage with the detection engineering cycle - Partner with the security engineering team to surface patterns from case review, propose new detection ideas, and validate that shipped detections perform as expected in production environments.
Qualifications
2-3+ years of hands-on experience in a SOC, MSSP, or MDR environment (Tier 2 or Tier 3 analyst level)
Experience triaging and investigating alerts across on prem and cloud environments (AWS CloudTrail, Okta, Entra ID, GSuite, EDR or similar)
Working knowledge of common attacker tactics, techniques, and procedures (MITRE ATT&CK)
Comfort with log-based investigation and evidence analysis across multiple data sources
Ability to write clear, concise case verdicts and communicate findings to technical and non-technical audiences
Strong attention to detail and an instinct for separating signal from noise
Bonus
Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
Familiarity with SQL or scripting for log analysis
Background in detection engineering or security content development
Experience with SIEM, EDR, or SOAR platforms
Exposure to AI-assisted investigation or automation tooling
Why Work at Artemis?
Make a real world impact. Every case you review and every detection you improve directly protects real companies and real people. You're not working on theoretical security problems — you're on the front lines of active defense, with customers who depend on the quality of your analysis.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and help shape the most advanced AI capabilities in cybersecurity — moving well beyond traditional SIEM workflows into a new generation of investigation automation. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive investigations, propose detection improvements, and own outcomes — not just follow a runbook.
If you are passionate about cyber security and want to apply your expertise at the cutting edge of AI-powered defense, we'd love to hear from you.
Compensation
We offer a competitive compensation of $120,000-$160,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\nJob Overview\n\nWe're looking for a Security Analyst to be at the core of what we do: reviewing real security cases across customer environments, recommending outcomes, and continuously improving the detection logic that powers our platform. This role sits at the intersection of hands-on SOC work and modern AI-assisted security operations — you'll develop deep expertise in cloud, identity, and SaaS threats while directly shaping the detection content and investigation workflows that protect our customers.\n\nResponsibilities\n\n - Review and triage security cases - Investigate alerts and cases surfaced by the Artemis platform across cloud, identity, endpoint, and SaaS environments. Analyze the underlying logs and evidence to determine whether activity is malicious, benign, or a false positive.\n\n - Recommend and document case outcomes - Provide clear, well-reasoned verdicts (true positive, false positive, benign confirmed) with supporting evidence and written justifications that feed directly into customer-facing reports and product improvement loops.\n\n - Build and refine detections - Write new detection logic and tune existing rules to improve signal quality. Work directly in the detection layer to reduce noise, close coverage gaps, and surface threats that matter.\n\n - Fix and maintain the detection library - Identify misfiring or noisy detections through case review and fix them. Own the quality of the detection content you touch from initial triage through to shipped improvement.\n\n - Conduct threat hunting - Proactively investigate customer environments for signs of attacker activity that automated detections may have missed, using both structured hypothesis-driven hunting and AI-assisted workflows.\n\n - Investigate security incidents - Perform deeper triage on escalated or complex cases, piecing together attacker timelines and identifying lateral movement, persistence, or exfiltration across data sources.\n\n - Contribute to investigation playbooks - Document investigation techniques, artifact patterns, and case patterns as structured playbooks that help scale consistent, high-quality analysis across the team.\n\n - Engage with the detection engineering cycle - Partner with the security engineering team to surface patterns from case review, propose new detection ideas, and validate that shipped detections perform as expected in production environments.\n\nQualifications\n\n - 2-3+ years of hands-on experience in a SOC, MSSP, or MDR environment (Tier 2 or Tier 3 analyst level)\n\n - Experience triaging and investigating alerts across on prem and cloud environments (AWS CloudTrail, Okta, Entra ID, GSuite, EDR or similar)\n\n - Working knowledge of common attacker tactics, techniques, and procedures (MITRE ATT&CK)\n\n - Comfort with log-based investigation and evidence analysis across multiple data sources\n\n - Ability to write clear, concise case verdicts and communicate findings to technical and non-technical audiences\n\n - Strong attention to detail and an instinct for separating signal from noise\n\nBonus\n\n - Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)\n\n - Familiarity with SQL or scripting for log analysis\n\n - Background in detection engineering or security content development\n\n - Experience with SIEM, EDR, or SOAR platforms\n\n - Exposure to AI-assisted investigation or automation tooling\n\nWhy Work at Artemis?\n\n - Make a real world impact. Every case you review and every detection you improve directly protects real companies and real people. You're not working on theoretical security problems — you're on the front lines of active defense, with customers who depend on the quality of your analysis.\n\n - Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.\n\n - Push the boundaries of technology. Work with and help shape the most advanced AI capabilities in cybersecurity — moving well beyond traditional SIEM workflows into a new generation of investigation automation. Your ideas will shape the product and the industry.\n\n - Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive investigations, propose detection improvements, and own outcomes — not just follow a runbook.\n\nIf you are passionate about cyber security and want to apply your expertise at the cutting edge of AI-powered defense, we'd love to hear from you.\n\nCompensation\n\nWe offer a competitive compensation of $120,000-$160,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"6e9e4105-6595-47c1-b4d9-acc8488f85f2","title":"Senior Software Engineer, Infrastructure ","department":"Engineering","team":"Engineering","employmentType":"FullTime","location":"New York City","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-05-06T13:46:43.318+00:00","isListed":true,"isRemote":false,"workplaceType":"OnSite","address":{"postalAddress":{"postalCode":"10001","addressRegion":"New York","streetAddress":"109 W 27th St, Floor 8","addressCountry":"United States","addressLocality":"New York City"}},"jobUrl":"https://jobs.ashbyhq.com/artemis/6e9e4105-6595-47c1-b4d9-acc8488f85f2","applyUrl":"https://jobs.ashbyhq.com/artemis/6e9e4105-6595-47c1-b4d9-acc8488f85f2/application","descriptionHtml":"Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
We’re backed by First Round Capital, Brightmind, and a group of the cybersecurity industry’s most prominent Operators.
Our founders, Shachar (ex-Palo Alto Networks, AWS, Demisto) and Dan (ex-Abnormal Security, Twitter) have previously built, launched, and scaled cybersecurity products loved and trusted by tens of thousands of customers, and have the customer, technology, and security know-hows to deliver this vision.
Our exceptionally strong team includes software engineers, AI researchers, security engineers, and product designers hailing from Google, Abnormal AI, Wiz, Meta, AWS, CERN, SentinelOne, and more.
We are growing our team and looking for passionate builders to join us and support our expanding customer base.
As an AI-first company and Senior Software Engineer, Infrastructure at Artemis, you'll own the backbone of a platform that processes exabytes of security telemetry in real time. You'll design and operate the systems that keep our ingestion pipelines, data stores, and AI workloads running reliably at scale — and you'll do it in an environment where the infrastructure decisions you make have a direct impact on how fast security teams can detect and respond to threats.
This is a hands-on, high-ownership role. You'll work closely with software engineers, AI/ML researchers, and security engineers to architect cloud infrastructure that is fast, resilient, cost-effective, and secure by design.
Design and operate cloud infrastructure at scale — Build and maintain highly available, fault-tolerant systems on AWS (and multi-cloud where relevant) that support petabyte-scale data ingestion, storage, and processing.
Own the data pipeline infrastructure — Manage and evolve the streaming and batch infrastructure (Kafka, Kinesis, Flink, or similar) that powers real-time detection and analytics.
Lead infrastructure-as-code practices — Drive adoption and quality of IaC (Terraform, Pulumi) across the platform, from network topology to compute and storage layers.
Harden production reliability — Define and own SLOs, build observability stacks (metrics, logs, traces), and lead incident response, blameless postmortems, and on-call rotations.
Drive security-first infrastructure — Implement zero-trust networking, secrets management, IAM best practices, and compliance controls befitting a cybersecurity company.
Partner with AI/ML and data teams — Support GPU workloads, model training pipelines, and large-scale data warehouses (Snowflake, ClickHouse, BigQuery) as first-class infrastructure citizens.
Scale with the team — Mentor engineers, contribute to technical roadmaps, and help define how infrastructure is built at Artemis as we grow rapidly.
Maintain a delivery-focused approach, ensuring efficient and timely deployment of high-impact features and infrastructure improvements.
5+ years of infrastructure or DevOps/platform engineering experience in production cloud environments at meaningful scale.
Deep expertise in AWS — GCP or Azure experience is a plus.
Extreme ownership mindset — you take personal responsibility for the success of the platform and the outcomes of your technical decisions.
Strong infrastructure-as-code skills with Terraform or Pulumi; experience managing large, multi-environment configurations.
Hands-on experience with streaming data infrastructure — Kafka, Kinesis, Flink, or equivalent at high throughput.
Solid Linux systems knowledge — networking (DNS, load balancing, firewalls), storage, performance tuning, and debugging production issues.
Experience building and operating observability platforms — Prometheus, Grafana, OpenTelemetry, Datadog, or similar.
Security-minded approach — comfortable implementing IAM policies, secrets management (Vault, AWS Secrets Manager), and network security controls.
Compensation
We offer a competitive compensation of $180,000 - $250,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
About The Role
Artemis Security is hiring a Product Designer to shape how security teams actually use our platform. In cybersecurity, most tools are built by engineers for engineers, and it shows - dense UIs, buried workflows, and dashboards no one actually looks at. We're building something different: a platform that security teams reach for because it's genuinely well-designed, not just powerful.
You'll own the end-to-end product experience across the Artemis platform, from the earliest concept sketches through pixel-perfect execution. You'll partner directly with our founders, product, and engineering leadership on the decisions that shape how the product feels, flows, and gets used every day. This is a role for a designer who thrives in complexity: security work generates enormous volumes of information, and you'll need a strong command of visual hierarchy — knowing what to foreground, what to tuck away, and how to make dense, data-rich interfaces feel clear and navigable.
Just as important is connective thinking: designing intuitive links between different areas of the product so teams can move fluidly from signal to investigation to response without losing context. You'll design for a technical, high-stakes audience — CISOs, security architects, SOC analysts — where clarity and trust matter more than flourish.
Responsibilities
Own product design end to end for the Artemis platform, from research and discovery through interaction design, visual polish, and hand-off
Partner directly with product managers, engineers, and security researchers to translate complex workflows into interfaces that feel intuitive to security teams
Design core experiences across detection, investigation, response, and platform administration - the moments where security teams either trust the product or don't
Build and evolve our design system so product velocity increases as we grow, without sacrificing quality or consistency
Lead user research with security practitioners, from customer calls and shadowing sessions to structured usability testing
Contribute to product strategy by bringing a strong point of view on what to build, not just how to build it
Work closely with our brand and marketing designers to ensure the product experience feels like a natural extension of the Artemis brand
Qualifications
5+ years of product design experience at an enterprise SaaS company, with meaningful ownership of complex, workflow-heavy products
A portfolio that demonstrates strong end-to-end product thinking, not just visual polish — clear examples of research, tradeoffs, and shipped work
Experience designing for technical or expert users (developers, security teams, data teams, IT admins, or similar), where dense information and complex workflows are the norm
Strong systems thinking, including experience building and scaling design systems across a growing product
Fluency in Figma, and comfort collaborating in engineering-adjacent workflows (linked components, dev handoff, prototyping)
Excellent written and verbal communication, especially when explaining design decisions to product, engineering, and executive stakeholders
Comfort working with AI tools (ChatGPT, Claude Design….etc.)
Nice to Have
Experience designing for cybersecurity, observability, developer tools, or other technical enterprise products
Background collaborating closely with AI/ML product surfaces, including agentic workflows, natural language interfaces, or LLM-driven experiences
Experience conducting user research directly with technical buyers or practitioners
Motion or prototyping skills that bring interaction design to life
Bonus if you're comfortable using AI tools like Claude to prototype in code and open your own PRs
Compensation
We offer a competitive compensation of $170,000-$220,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\nAbout The Role\n\nArtemis Security is hiring a Product Designer to shape how security teams actually use our platform. In cybersecurity, most tools are built by engineers for engineers, and it shows - dense UIs, buried workflows, and dashboards no one actually looks at. We're building something different: a platform that security teams reach for because it's genuinely well-designed, not just powerful.\n\nYou'll own the end-to-end product experience across the Artemis platform, from the earliest concept sketches through pixel-perfect execution. You'll partner directly with our founders, product, and engineering leadership on the decisions that shape how the product feels, flows, and gets used every day. This is a role for a designer who thrives in complexity: security work generates enormous volumes of information, and you'll need a strong command of visual hierarchy — knowing what to foreground, what to tuck away, and how to make dense, data-rich interfaces feel clear and navigable.\n\nJust as important is connective thinking: designing intuitive links between different areas of the product so teams can move fluidly from signal to investigation to response without losing context. You'll design for a technical, high-stakes audience — CISOs, security architects, SOC analysts — where clarity and trust matter more than flourish.\n\nResponsibilities\n\n - Own product design end to end for the Artemis platform, from research and discovery through interaction design, visual polish, and hand-off\n\n - Partner directly with product managers, engineers, and security researchers to translate complex workflows into interfaces that feel intuitive to security teams\n\n - Design core experiences across detection, investigation, response, and platform administration - the moments where security teams either trust the product or don't\n\n - Build and evolve our design system so product velocity increases as we grow, without sacrificing quality or consistency\n\n - Lead user research with security practitioners, from customer calls and shadowing sessions to structured usability testing\n\n - Contribute to product strategy by bringing a strong point of view on what to build, not just how to build it\n\n - Work closely with our brand and marketing designers to ensure the product experience feels like a natural extension of the Artemis brand\n\nQualifications\n\n - 5+ years of product design experience at an enterprise SaaS company, with meaningful ownership of complex, workflow-heavy products\n\n - A portfolio that demonstrates strong end-to-end product thinking, not just visual polish — clear examples of research, tradeoffs, and shipped work\n\n - Experience designing for technical or expert users (developers, security teams, data teams, IT admins, or similar), where dense information and complex workflows are the norm\n\n - Strong systems thinking, including experience building and scaling design systems across a growing product\n\n - Fluency in Figma, and comfort collaborating in engineering-adjacent workflows (linked components, dev handoff, prototyping)\n\n - Excellent written and verbal communication, especially when explaining design decisions to product, engineering, and executive stakeholders\n\n - Comfort working with AI tools (ChatGPT, Claude Design….etc.)\n\nNice to Have\n\n - Experience designing for cybersecurity, observability, developer tools, or other technical enterprise products\n\n - Background collaborating closely with AI/ML product surfaces, including agentic workflows, natural language interfaces, or LLM-driven experiences\n\n - Experience conducting user research directly with technical buyers or practitioners\n\n - Motion or prototyping skills that bring interaction design to life\n\n - Bonus if you're comfortable using AI tools like Claude to prototype in code and open your own PRs\n\nCompensation\n\nWe offer a competitive compensation of $170,000-$220,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"f4856a64-c14e-43be-b8cd-e51e08860d3e","title":"Channels and Partnerships Lead","department":"G&A ","team":"G&A ","employmentType":"FullTime","location":"New York City","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-06-16T20:05:20.293+00:00","isListed":true,"isRemote":false,"workplaceType":"OnSite","address":{"postalAddress":{"postalCode":"10001","addressRegion":"New York","streetAddress":"109 W 27th St, Floor 8","addressCountry":"United States","addressLocality":"New York City"}},"jobUrl":"https://jobs.ashbyhq.com/artemis/f4856a64-c14e-43be-b8cd-e51e08860d3e","applyUrl":"https://jobs.ashbyhq.com/artemis/f4856a64-c14e-43be-b8cd-e51e08860d3e/application","descriptionHtml":"We're hiring our first Partnerships Lead to build the partner ecosystem that will become a force multiplier for Artemis's growth.
Parters are not our distribution strategy-they are a growth strategy. They influence buying decisions, accelerate trust, drive deployments, and expand market reach. The right ecosystem can create outsized leverage for an early-stage company.
This is a builder role.
You'll define Artemis's partner ecosystem strategy from the ground up, recruit and activate strategic partners, establish repeatable partner motions, and build the operational foundation for a world-class channel and alliances organization.
You'll work directly with the founders and partner closely with Sales, Product, Marketing, Customer Success, and Engineering.
Success in this role means turning partnerships into measurable revenue, market awareness, customer outcomes, and strategic advantage.
Develop and execute Artemis's partner strategy across:
Strategic channels and technology alliances
Cloud providers
Security platforms
MSSPs and MDRs
Value-added resellers
Global Systems Integrators (Accenture, Deloitte, EY)
Regional and boutique consulting partners
Identify, recruit, and activate the first wave of strategic partners aligned with Artemis's target customer profile.
Prioritize partner investments based on revenue potential, market influence, technical alignment, and customer reach.
Establish executive relationships across partner organizations.
Create and operationalize:
Partner program framework
Deal registration
Rules of engagement
Incentive structures
Partner Marketing strategy
Referral and reseller motions
Marketplace strategy
Partner success metrics and operational best practices
Build partner business plans and quarterly success metrics.
Develop joint sales plays, campaigns, events, workshops, and executive engagement programs.
Drive co-sell motions and marketplace opportunities.
Coordinate pipeline generation activities with Sales and Marketing.
Build partner enablement strategy and partner cross-functionallly to deliver assets, training, demo environments, battlecards, technical documentation-that let partners use, sell and deploy Artemis (products and services) with confidence
Drive partner-sourced and partner-influenced pipeline.
Establish partner contribution as a measurable component of company growth.
Build forecasting and reporting mechanisms for partner performance.
7+ years of experience in partnerships, alliances, channel sales, ecosystem development, or business development.
3+ years within cybersecurity, cloud, or enterprise infrastructure.
Demonstrated success building partner programs from an early-stage or growth-stage environment.
Proven ability to generate measurable pipeline and revenue through partnerships.
Strong trusted network of channel and tech alliance partners
Experience building executive-level relationships and influencing senior stakeholders.
Strong operational discipline with the ability to build scalable processes from scratch.
Excellent written, verbal, and presentation skills.
Comfortable operating in ambiguity and moving quickly with limited resources.
Prior experience as the first partnerships or channel hire at a cybersecurity startup.
Experience helping scale a company from Series A through growth stage.
Background in sales engineering, product management, consulting, or enterprise sales.
Experience with cloud marketplaces and co-sell programs.
Existing relationships with AWS, CrowdStrike, Google, Accenture, Deloitte, EY, Optiv, GuidePoint, WWT, and major MSSPs.
Experience structuring OEM, embedded technology, and strategic ecosystem partnerships.
Familiarity with AI-native security, security operations, threat intelligence, and enterprise security architectures.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
As Enterprise Account Executive, you'll own enterprise revenue from day one. You'll build our pipeline, develop strategic relationships with security executives, and close deals that prove our value in market. You'll work directly with our founders to shape not just revenue, but how we position, package, and sell our platform to security-conscious enterprises.
This role combines the autonomy and equity upside of a startup with the backing of proven partnerships and a category-defining product. You'll have an unparalleled impact on our go-to-market trajectory and build the foundation for the sales organization we'll scale around you.
Responsibilities
Develop and execute territory plans targeting Fortune 1000 and Global 2000 security organizations. You'll identify and prioritize accounts where Artemis delivers the most strategic value, building multi-threaded relationships from security operations teams through the CISO.
Build a qualified pipeline through strategic outbound prospecting and industry engagement. This is all about creating opportunities.
Lead complex, consultative sales cycles. You'll articulate how AI-driven defense changes the economics and effectiveness of their security programs.
Collaborate with our technical team to deliver compelling proofs-of-concept and technical evaluations. You'll navigate technical objections, competitive positioning, and architecture discussions alongside our founders.
Drive accurate forecasting and maintain rigorous pipeline hygiene in HubSpot. You'll own the forecast and build the discipline that scales with future hires.
Represent Artemis at key industry events.
Serve as voice of customer, providing strategic feedback to our founders and team. Your insights from the field will directly shape our roadmap and go-to-market strategy.
Document and refine our sales methodology to enable future team growth.
Qualifications
Proven experience selling enterprise cybersecurity solutions. 7+ years of enterprise sales experience with consistent over-achievement (120%+ quota attainment). You've sold into Fortune 1000 and Global 2000 security organizations with deal sizes of $250K-$1M+ and know how to navigate complex, multi-stakeholder buying processes.
Deep understanding of enterprise security architectures and the CISO buying journey. You speak fluently about detection, response, AI/ML in security, and can hold your own in technical conversations about data platforms, SIEM, EDR/XDR, and cloud security.
Established relationships with enterprise CISOs, security leaders, and security operations teams. You have credibility in the market and know how to leverage it.
Track record of building pipeline without heavy marketing support. You're a hunter who thrives on ecosystem leverage and creating your own opportunities.
Strong executive presence and ability to command both technical and business conversations. You can shift seamlessly between ROI discussions and architecture talks with the security engineering team.
Proficiency in value-based selling and solution-selling methodologies (such as MEDDICC).
Experience leveraging channel partners and strategic alliances to accelerate deals. You understand how to work the ecosystem.
Expert-level use of HubSpot and a disciplined approach to pipeline management. You've built forecasts that executives trust.
Preferred:
Experience at high-growth, early-stage cybersecurity companies (Series A-B) where you were sales hire #1-3. You've built sales infrastructure before, not just executed within it.
Existing relationships with cybersecurity ecosystem partners (VARs, integrators, strategic alliances).
Background in AI/ML-driven security, SIEM/SOAR, detection and response, or cloud security platforms.
Experience presenting at industry conferences and building market presence.
Why Work at Artemis?
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced AI-powered cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years anywhere else.
Build the foundation. You're not joining an established sales machine - you're building it. Your success creates the blueprint. Your deals prove the category. Your feedback shapes the product.
Significant upside. As our founding Account Executive, you'll have equity and earning potential that reflects the value you're creating.
If you are passionate about building enterprise sales from the ground up and want to help companies defend against AI-powered adversaries, we'd love to hear from you.
Compensation
We offer a competitive compensation of $320,000-$360,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a SOC Manager to lead and scale Artemis Apollo, our managed detection and response (MDR) service. Apollo is already live: our AI-native platform investigates and resolves cases for customers today, and a security team works them. This is a player-coach leadership role — you'll set the direction for how the SOC operates as we scale, sharpening the standard operating procedures, escalation paths, and quality bar, while still working real cases alongside your team. You'll own how we deliver security outcomes to customers: the SLAs we commit to, the consistency and quality of every verdict, and the human expertise and communication that set Apollo apart from a traditional SOC.
Responsibilities
Lead and scale the MDR operation - Own and evolve the Artemis Apollo SOC, directing shift coverage, staffing ratios, and day-to-day operations as the team and customer base grow.
Set the operating standard - Shape and continuously improve the SOPs, runbooks, escalation paths, and on-call processes that make case review consistent, repeatable, and high-quality across analysts and shifts.
Own quality assurance - Review analyst verdicts and case work, set and enforce the quality bar, and close the loop with coaching so the team's analysis stays accurate and customer-ready.
Carry a caseload as a player-coach - Work and escalate real cases yourself, especially early and during peak load, leading from the front rather than only managing from above.
Own SLAs and service delivery - Define, commit to, and hit response-time targets by severity, and manage the queue so the most important cases are worked first.
Lead incident response and escalations - Run point when a case becomes a declared incident: coordinate containment, drive the MDR-to-IR handoff, and guide customer leadership and their IR partners through it.
Hire, onboard, and mentor analysts - Grow the team: recruit mid-to-senior analysts, run onboarding and training, and develop strong analysts at every level without lowering the bar.
Be a trusted security voice for customers - Serve as a senior security point of contact alongside the broader team: present findings and outcomes, handle escalations, and communicate clearly, meeting customers where they are.
Shape and improve the product - You'll have both the ability and the responsibility to influence the Artemis platform: turn patterns from case review into detection tuning, product requirements, and response automation, so recurring noise gets fixed at the source and the product gets better with every case.
Manage the metrics that matter - Track must-review load, mean-time-to-verdict, analyst-vs-system agreement, and SLA attainment, and use them to right-size staffing and prove out the operation.
Qualifications
7+ years of hands-on cybersecurity experience, including team leadership in a SOC, MSSP, or MDR environment
Proven experience building or running a SOC / MDR operation, standing up SOPs, runbooks, shift coverage, and SLA programs
Hands-on incident response experience across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS environments
Strong knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and the ability to QA and elevate analyst investigations
Track record hiring, mentoring, and retaining tier-2/3 analysts while holding a high quality bar
Excellent communication skills, comfortable owning customer relationships and incident calls with both technical and executive audiences
Bonus
Experience standing up or scaling a SOC or MDR service
Familiarity with a wide range of security tools (SIEM, EDR, SOAR) and detection content (Sigma, YARA-L, SPL, KQL)
Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF) and audit-ready reporting
Customer-facing experience in an MDR or managed-services context
Experience with AI-assisted investigation or automation tooling
Why Work at Artemis?
Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook.
If you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you.
Compensation
We offer a competitive compensation of $160,000-$200,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\nJob Overview\n\nWe're looking for a SOC Manager to lead and scale Artemis Apollo, our managed detection and response (MDR) service. Apollo is already live: our AI-native platform investigates and resolves cases for customers today, and a security team works them. This is a player-coach leadership role — you'll set the direction for how the SOC operates as we scale, sharpening the standard operating procedures, escalation paths, and quality bar, while still working real cases alongside your team. You'll own how we deliver security outcomes to customers: the SLAs we commit to, the consistency and quality of every verdict, and the human expertise and communication that set Apollo apart from a traditional SOC.\n\nResponsibilities\n\n - Lead and scale the MDR operation - Own and evolve the Artemis Apollo SOC, directing shift coverage, staffing ratios, and day-to-day operations as the team and customer base grow.\n\n - Set the operating standard - Shape and continuously improve the SOPs, runbooks, escalation paths, and on-call processes that make case review consistent, repeatable, and high-quality across analysts and shifts.\n\n - Own quality assurance - Review analyst verdicts and case work, set and enforce the quality bar, and close the loop with coaching so the team's analysis stays accurate and customer-ready.\n\n - Carry a caseload as a player-coach - Work and escalate real cases yourself, especially early and during peak load, leading from the front rather than only managing from above.\n\n - Own SLAs and service delivery - Define, commit to, and hit response-time targets by severity, and manage the queue so the most important cases are worked first.\n\n - Lead incident response and escalations - Run point when a case becomes a declared incident: coordinate containment, drive the MDR-to-IR handoff, and guide customer leadership and their IR partners through it.\n\n - Hire, onboard, and mentor analysts - Grow the team: recruit mid-to-senior analysts, run onboarding and training, and develop strong analysts at every level without lowering the bar.\n\n - Be a trusted security voice for customers - Serve as a senior security point of contact alongside the broader team: present findings and outcomes, handle escalations, and communicate clearly, meeting customers where they are.\n\n - Shape and improve the product - You'll have both the ability and the responsibility to influence the Artemis platform: turn patterns from case review into detection tuning, product requirements, and response automation, so recurring noise gets fixed at the source and the product gets better with every case.\n\n - Manage the metrics that matter - Track must-review load, mean-time-to-verdict, analyst-vs-system agreement, and SLA attainment, and use them to right-size staffing and prove out the operation.\n\nQualifications\n\n - 7+ years of hands-on cybersecurity experience, including team leadership in a SOC, MSSP, or MDR environment\n\n - Proven experience building or running a SOC / MDR operation, standing up SOPs, runbooks, shift coverage, and SLA programs\n\n - Hands-on incident response experience across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS environments\n\n - Strong knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and the ability to QA and elevate analyst investigations\n\n - Track record hiring, mentoring, and retaining tier-2/3 analysts while holding a high quality bar\n\n - Excellent communication skills, comfortable owning customer relationships and incident calls with both technical and executive audiences\n\nBonus\n\n - Experience standing up or scaling a SOC or MDR service\n\n - Familiarity with a wide range of security tools (SIEM, EDR, SOAR) and detection content (Sigma, YARA-L, SPL, KQL)\n\n - Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF) and audit-ready reporting\n\n - Customer-facing experience in an MDR or managed-services context\n\n - Experience with AI-assisted investigation or automation tooling\n\nWhy Work at Artemis?\n\n - Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on.\n\n - Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.\n\n - Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like.\n\n - Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook.\n\nIf you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you.\n\nCompensation\n\nWe offer a competitive compensation of $160,000-$200,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"acb45316-3371-46d3-86f6-639180f3d09e","title":"Technology Alliances Manager","department":"G&A ","team":"G&A ","employmentType":"FullTime","location":"Remote","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-10-11T22:15:48.305+00:00","isListed":true,"isRemote":null,"workplaceType":null,"address":null,"jobUrl":"https://jobs.ashbyhq.com/artemis/acb45316-3371-46d3-86f6-639180f3d09e","applyUrl":"https://jobs.ashbyhq.com/artemis/acb45316-3371-46d3-86f6-639180f3d09e/application","descriptionHtml":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
About the Role
Most companies treat technology alliances as a nice-to-have. At Artemis, alliances are closer to how the product works. Our platform runs on AWS and reasons over telemetry that lives in other vendors' systems: EDR, SIEM, identity, cloud, and the pipelines that move security data between them. Every one of those vendors is simultaneously an integration, a channel, and a reason a customer picks us. The companies we plug into are the companies we go to market with.
We're hiring a Technology Alliances Manager to own that motion end to end, with three tracks front and center:
Hyperscalers. AWS first: we build on it and our customers run on it. Own the relationship end to end: Marketplace transactability and private offers, co-sell through ISV Accelerate, competency milestones, and the AWS field teams who can put us in front of their accounts.
Security platforms. The largest vendors in security (CrowdStrike, Palo Alto Networks, and their peers) already collect the telemetry we investigate. Build the alliances that position Artemis as a multiplier on their platforms: partnership agreements, store listings, certified integrations, and field-level co-sell.
ISVs. The vendors that shape and route security data (Cribl and its peers) as well as domain specific security companies helps us secure customers together. Build the reference architectures and joint plays that helps customers stay safe.
Many of these relationships are already in motion at the executive level. Your job is to take them from conversations to signed, integrated, revenue-producing partnerships, and to decide what we pursue next.
We're not collecting logos. A partnership counts when it produces something measurable: sourced pipeline, marketplace revenue, an integration customers actually turn on, a partner seller who pulls us into a deal. You'll be measured on those outcomes, and you'll have the product, engineering, and executive support to hit them.
Responsibilities
Own the technology partner map: which partners, in what order, for what outcome; double down on what performs and kill what doesn't
Run the AWS motion end to end: Marketplace listing and private offers, co-sell pipeline, program and competency milestones, and joint content with AWS field and specialist teams
Build and negotiate alliances with the major security platforms: agreements, integration roadmaps, marketplace listings, and better-together assets (solution briefs, reference architectures, joint demos) that sales actually uses
Drive integrations from scoping to launch with product and engineering on both sides, and make sure every launch ships with a go-to-market moment, not just a docs page
Turn partnerships into revenue: joint account mapping, co-sell registrations, warm intros, MDF, and partner events (RSA, re:Invent, Fal.Con, Black Hat), with tracking of alliance-sourced and alliance-influenced pipeline
Bring partner and market signal back into product roadmap and positioning
What Success Looks Like in Year One
Artemis transacts on AWS Marketplace with an active co-sell motion and registered opportunities flowing in both directions
Two or three anchor alliances with major security vendors are signed, integrated, and producing referred deals
Every anchor partner has a better-together kit our sales team actually pulls up in live deals
Alliance-sourced and alliance-influenced pipeline is a tracked, growing number the whole company can see
Move at rocket speed, build something massive.
Artemis is an early-stage cybersecurity company solving problems that matter, against adversaries that don't slow down. As our founding Technology Alliances Manager, you'll shape how Artemis plugs into the rest of the security stack and how customers experience us alongside every other tool they run. You'll have full ownership, real autonomy, and a direct line to leadership. The pace is fast, the bar is high, and the impact is direct.
Qualifications
5+ years in technology alliances, partnerships, or business development at a cybersecurity or enterprise infrastructure company
At least one partnership you built from zero and can walk us through in numbers: what it sourced, influenced, or unlocked
Hands-on hyperscaler experience: you've listed and transacted on a cloud marketplace, worked programs like AWS ISV Accelerate, and know how co-sell and partner funding actually operate
Fluency in the security ecosystem: the major platforms across EDR/XDR, SIEM, identity, and data pipeline, how they interoperate, and what their partner organizations optimize for
Range: technical enough to whiteboard an integration with partner engineers, commercial enough to negotiate the agreement behind it, credible with partner executives
Judgment for coopetition: some of our most important partners also ship competing products, and you know how to build the better-together lane anyway
Comfort with ambiguity, building from scratch, and moving fast without dropping details
Nice to Have
Time inside the partner organization of a hyperscaler or major security platform: you know how AWS, CrowdStrike, or Palo Alto Networks evaluate ISV partners from the inside
Existing relationships across the security partner ecosystem
Experience as a company's first alliances hire
Familiarity with partner ecosystem tooling (Crossbeam, Tackle, WorkSpan, and similar)
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
About The Role
Artemis Security is hiring our first Security Engineer to own internal security at the company. In a cybersecurity company, internal security isn't a checkbox — it's a reflection of everything we sell. Our customers trust us with their most sensitive telemetry, and how we run our own environment has to meet a bar higher than anyone else's.
This is a hands-on, senior IC role. You'll be the technical owner of Artemis's internal security posture, building the systems, controls, and programs that protect the company from the inside out. You'll also own the security-critical parts of our IT environment, working closely with our IT provider on execution. You'll report into leadership, partner with our founders, engineering, and security teams, and have the autonomy to build the security foundation the right way from day one.
You won't be managing a team. You'll be building the program.
Responsibilities
Own Artemis's internal security posture end to end, including endpoint security, identity and access management, network security, email security, and cloud security for our corporate environment
Design and run our identity strategy across SSO, MFA, conditional access, and privileged access management
Build and operate our vulnerability management program, including patching, endpoint hardening, and continuous monitoring
Lead incident response for internal security events, from detection and containment through investigation and post-incident review
Drive our compliance and certification work (SOC 2 Type II, ISO 27001, and others as we grow), including scoping, evidence collection, and working with external auditors
Build and run the security awareness program, including ongoing training, phishing simulations, and role-specific education
Set and maintain security policies, standards, and internal documentation that scale with the company
Own vendor risk and third-party security reviews for tools and partners we bring in
Partner with product security and engineering leadership to keep internal and product security aligned
You’ll be working hands-on with the best security tool in the world, Artemis!
Qualifications
5+ years of hands-on experience in security engineering, IT security, or corporate security, with real ownership of internal security programs at a top-tier software/tech company
Deep expertise in one or more of the following: identity and access management, endpoint security, cloud security (AWS/GCP/Azure), or SaaS security
Hands-on experience with SOC 2 and/or ISO 27001 audits, including scoping, evidence collection, and working with auditors
Strong understanding of modern attacker tradecraft — you know how real breaches happen, not just what the frameworks say
Direct experience leading incident response for internal security events, from detection through post-mortem
Familiarity with modern security tooling across EDR, SIEM, IAM, MDM, DLP, email security, and vulnerability management
Strong systems thinking — you can balance security rigor with the reality of a fast-moving startup
Clear communicator who can translate security tradeoffs to leadership and non-technical teams
Comfort operating with autonomy in an early-stage environment and building programs from scratch, without a manager or team backing you up
Nice to Have
Prior experience as the first or founding internal security hire at a startup
Background as a practitioner in cybersecurity — SOC, threat detection, red team, or product security experience
Relevant certifications (CISSP, OSCP, GCIA, GCIH, CISA, or equivalent)
Experience with security operations tooling that Artemis itself sells (SIEM, XDR, detection & response platforms)
Familiarity with regulated frameworks beyond SOC 2 and ISO (FedRAMP, HIPAA, PCI, GDPR)
Compensation
We offer a competitive compensation of $180,000-$230,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\nAbout The Role\n\nArtemis Security is hiring our first Security Engineer to own internal security at the company. In a cybersecurity company, internal security isn't a checkbox — it's a reflection of everything we sell. Our customers trust us with their most sensitive telemetry, and how we run our own environment has to meet a bar higher than anyone else's.\n\nThis is a hands-on, senior IC role. You'll be the technical owner of Artemis's internal security posture, building the systems, controls, and programs that protect the company from the inside out. You'll also own the security-critical parts of our IT environment, working closely with our IT provider on execution. You'll report into leadership, partner with our founders, engineering, and security teams, and have the autonomy to build the security foundation the right way from day one.\n\nYou won't be managing a team. You'll be building the program.\n\n\n\nResponsibilities\n\n - Own Artemis's internal security posture end to end, including endpoint security, identity and access management, network security, email security, and cloud security for our corporate environment\n\n - Design and run our identity strategy across SSO, MFA, conditional access, and privileged access management\n\n - Build and operate our vulnerability management program, including patching, endpoint hardening, and continuous monitoring\n\n - Lead incident response for internal security events, from detection and containment through investigation and post-incident review\n\n - Drive our compliance and certification work (SOC 2 Type II, ISO 27001, and others as we grow), including scoping, evidence collection, and working with external auditors\n\n - Build and run the security awareness program, including ongoing training, phishing simulations, and role-specific education\n\n - Set and maintain security policies, standards, and internal documentation that scale with the company\n\n - Own vendor risk and third-party security reviews for tools and partners we bring in\n\n - Partner with product security and engineering leadership to keep internal and product security aligned\n\n - You’ll be working hands-on with the best security tool in the world, Artemis!\n \n \n\nQualifications\n\n - 5+ years of hands-on experience in security engineering, IT security, or corporate security, with real ownership of internal security programs at a top-tier software/tech company\n\n - Deep expertise in one or more of the following: identity and access management, endpoint security, cloud security (AWS/GCP/Azure), or SaaS security\n\n - Hands-on experience with SOC 2 and/or ISO 27001 audits, including scoping, evidence collection, and working with auditors\n\n - Strong understanding of modern attacker tradecraft — you know how real breaches happen, not just what the frameworks say\n\n - Direct experience leading incident response for internal security events, from detection through post-mortem\n\n - Familiarity with modern security tooling across EDR, SIEM, IAM, MDM, DLP, email security, and vulnerability management\n\n - Strong systems thinking — you can balance security rigor with the reality of a fast-moving startup\n\n - Clear communicator who can translate security tradeoffs to leadership and non-technical teams\n\n - Comfort operating with autonomy in an early-stage environment and building programs from scratch, without a manager or team backing you up\n\nNice to Have\n\n - Prior experience as the first or founding internal security hire at a startup\n\n - Background as a practitioner in cybersecurity — SOC, threat detection, red team, or product security experience\n\n - Relevant certifications (CISSP, OSCP, GCIA, GCIH, CISA, or equivalent)\n\n - Experience with security operations tooling that Artemis itself sells (SIEM, XDR, detection & response platforms)\n\n - Familiarity with regulated frameworks beyond SOC 2 and ISO (FedRAMP, HIPAA, PCI, GDPR)\n\n\n\nCompensation\n\nWe offer a competitive compensation of $180,000-$230,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"d6f6a87c-d596-4437-8b60-15d16628436c","title":"Detection Engineer","department":"Engineering","team":"Engineering","employmentType":"FullTime","location":"Remote","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-10-11T22:04:37.457+00:00","isListed":true,"isRemote":null,"workplaceType":null,"address":null,"jobUrl":"https://jobs.ashbyhq.com/artemis/d6f6a87c-d596-4437-8b60-15d16628436c","applyUrl":"https://jobs.ashbyhq.com/artemis/d6f6a87c-d596-4437-8b60-15d16628436c/application","descriptionHtml":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
About the Role
We're looking for a Detection Engineer to own the detection content that powers the Artemis platform. You'll design, build, test, and continuously tune high-fidelity detections across cloud, identity, endpoint, and SaaS environments — treating detection as code, and using AI as a force multiplier at every step: authoring rules with AI assistance, and building anomaly detections that learn what's normal in each environment and flag what isn't. Detections at Artemis don't just fire alerts; they feed an AI-native investigation pipeline, so precision, rich context, and machine-readable output matter as much as coverage. This is a hands-on engineering role where every rule you ship directly determines what threats we catch for customers and how fast we catch them.
Responsibilities
Build and maintain the detection library - Design, implement, and own high-fidelity detections across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS log sources, from hypothesis to production.
Practice detection-as-code - Manage detection content like software: version-controlled rules, peer review, automated validation and testing, and CI/CD deployment across customer environments.
Map and close coverage gaps - Measure detection coverage against MITRE ATT&CK, prioritize gaps based on real-world threat activity, and systematically close them.
Validate against real attacks - Build and run attack simulations and test harnesses to prove detections fire on true positives and stay quiet on benign activity, before and after they ship.
Tune relentlessly - Own false-positive and false-negative rates across the fleet: analyze detection performance data, tune noisy logic at the source, and sunset detections that no longer earn their keep.
Use AI to write detections at scale - Leverage AI throughout the detection lifecycle: use AI-assisted workflows to author, convert, test, and document rules faster than any traditional team could, and build the tooling that makes AI-generated detection content trustworthy enough to ship.
Build behavioral and anomaly-based detections - Go beyond static signatures: establish behavioral baselines of normal activity per environment (identity, cloud, SaaS usage patterns) and engineer anomaly detections that surface deviations — impossible travel, unusual privilege use, novel API activity — with high signal and low noise.
Engineer detections for AI-powered investigation - Design detections that produce rich, structured context so the Artemis platform can investigate and resolve cases autonomously.
Turn intelligence into detections - Translate threat intelligence, incident findings, and threat hunt results from our research and SOC teams into durable, behavioral detection logic.
Partner with the SOC and research teams - Close the loop with Apollo analysts and security researchers: use case outcomes and analyst feedback to drive detection improvements, and give them documentation that makes every alert investigable.
Support customer-specific tuning - Adapt and tune detection content to each customer's environment and business context, reducing noise without sacrificing coverage.
Qualifications
5+ years of hands-on cybersecurity experience, with significant time in detection engineering
Proven track record designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms
Strong proficiency in detection languages and formats such as Sigma, KQL, SPL, or YARA-L, and comfort writing code (Python preferred) for automation and testing
Deep knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they manifest in logs across cloud, identity, endpoint, and SaaS telemetry
Experience with detection-as-code workflows: Git, peer review, automated testing, and CI/CD for detection content
Experience using AI tools to accelerate detection authoring, tuning, or validation — and judgment about when AI-generated logic is ready to ship
Experience building behavioral or anomaly-based detections: establishing baselines of normal activity and engineering detections that flag meaningful deviations
Strong log-analysis skills and demonstrated ability to distinguish malicious activity from benign noise across diverse data sources
Clear written and verbal communication — able to document detection logic and explain coverage and trade-offs to engineers, analysts, and customers
Bonus
Experience in an MDR, MSSP, or high-volume SOC environment
Experience with attack simulation and validation frameworks (Atomic Red Team, purple teaming)
Background in threat hunting or incident response across cloud environments
Experience with UEBA platforms or statistical/ML-based detection methods (peer grouping, time-series baselining, outlier scoring)
Experience building AI-assisted detection or investigation tooling from scratch
Contributions to open-source detection content or the broader detection engineering community
Why Work at Artemis?
Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook.
If you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you.
Compensation
We offer a competitive compensation of $160,000-190,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\nAbout the Role\n\nWe're looking for a Detection Engineer to own the detection content that powers the Artemis platform. You'll design, build, test, and continuously tune high-fidelity detections across cloud, identity, endpoint, and SaaS environments — treating detection as code, and using AI as a force multiplier at every step: authoring rules with AI assistance, and building anomaly detections that learn what's normal in each environment and flag what isn't. Detections at Artemis don't just fire alerts; they feed an AI-native investigation pipeline, so precision, rich context, and machine-readable output matter as much as coverage. This is a hands-on engineering role where every rule you ship directly determines what threats we catch for customers and how fast we catch them.\n\nResponsibilities\n\n - Build and maintain the detection library - Design, implement, and own high-fidelity detections across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS log sources, from hypothesis to production.\n\n - Practice detection-as-code - Manage detection content like software: version-controlled rules, peer review, automated validation and testing, and CI/CD deployment across customer environments.\n\n - Map and close coverage gaps - Measure detection coverage against MITRE ATT&CK, prioritize gaps based on real-world threat activity, and systematically close them.\n\n - Validate against real attacks - Build and run attack simulations and test harnesses to prove detections fire on true positives and stay quiet on benign activity, before and after they ship.\n\n - Tune relentlessly - Own false-positive and false-negative rates across the fleet: analyze detection performance data, tune noisy logic at the source, and sunset detections that no longer earn their keep.\n\n - Use AI to write detections at scale - Leverage AI throughout the detection lifecycle: use AI-assisted workflows to author, convert, test, and document rules faster than any traditional team could, and build the tooling that makes AI-generated detection content trustworthy enough to ship.\n\n - Build behavioral and anomaly-based detections - Go beyond static signatures: establish behavioral baselines of normal activity per environment (identity, cloud, SaaS usage patterns) and engineer anomaly detections that surface deviations — impossible travel, unusual privilege use, novel API activity — with high signal and low noise.\n\n - Engineer detections for AI-powered investigation - Design detections that produce rich, structured context so the Artemis platform can investigate and resolve cases autonomously.\n\n - Turn intelligence into detections - Translate threat intelligence, incident findings, and threat hunt results from our research and SOC teams into durable, behavioral detection logic.\n\n - Partner with the SOC and research teams - Close the loop with Apollo analysts and security researchers: use case outcomes and analyst feedback to drive detection improvements, and give them documentation that makes every alert investigable.\n\n - Support customer-specific tuning - Adapt and tune detection content to each customer's environment and business context, reducing noise without sacrificing coverage.\n\nQualifications\n\n - 5+ years of hands-on cybersecurity experience, with significant time in detection engineering\n\n - Proven track record designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms\n\n - Strong proficiency in detection languages and formats such as Sigma, KQL, SPL, or YARA-L, and comfort writing code (Python preferred) for automation and testing\n\n - Deep knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they manifest in logs across cloud, identity, endpoint, and SaaS telemetry\n\n - Experience with detection-as-code workflows: Git, peer review, automated testing, and CI/CD for detection content\n\n - Experience using AI tools to accelerate detection authoring, tuning, or validation — and judgment about when AI-generated logic is ready to ship\n\n - Experience building behavioral or anomaly-based detections: establishing baselines of normal activity and engineering detections that flag meaningful deviations\n\n - Strong log-analysis skills and demonstrated ability to distinguish malicious activity from benign noise across diverse data sources\n\n - Clear written and verbal communication — able to document detection logic and explain coverage and trade-offs to engineers, analysts, and customers\n\nBonus\n\n - Experience in an MDR, MSSP, or high-volume SOC environment\n\n - Experience with attack simulation and validation frameworks (Atomic Red Team, purple teaming)\n\n - Background in threat hunting or incident response across cloud environments\n\n - Experience with UEBA platforms or statistical/ML-based detection methods (peer grouping, time-series baselining, outlier scoring)\n\n - Experience building AI-assisted detection or investigation tooling from scratch\n\n - Contributions to open-source detection content or the broader detection engineering community\n\nWhy Work at Artemis?\n\n - Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on.\n\n - Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.\n\n - Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like.\n\n - Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook.\n\nIf you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you.\n\nCompensation\n\nWe offer a competitive compensation of $160,000-190,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"60059319-c501-42e4-bfc2-aed7173b2bd6","title":"Senior Recruiter ","department":"G&A ","team":"G&A ","employmentType":"FullTime","location":"New York City","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-10-11T22:15:07.960+00:00","isListed":true,"isRemote":false,"workplaceType":"OnSite","address":{"postalAddress":{"postalCode":"10001","addressRegion":"New York","streetAddress":"109 W 27th St, Floor 8","addressCountry":"United States","addressLocality":"New York City"}},"jobUrl":"https://jobs.ashbyhq.com/artemis/60059319-c501-42e4-bfc2-aed7173b2bd6","applyUrl":"https://jobs.ashbyhq.com/artemis/60059319-c501-42e4-bfc2-aed7173b2bd6/application","descriptionHtml":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Responsibilities
You'll support recruiting across our technical org (engineers, architects, data folks) and our GTM org (sales, CS, marketing). That means:
Building pipelines. Sourcing engineers and go-to-market talent who actually know what they're doing. You'll need conviction about who moves the needle and who doesn't.
Closing candidates. You're not just sourcing—you're selling. Why Artemis? Why now? Why this candidate specifically? You need to answer those before they do.
Working backwards from hiring plan. Sales needs 3 AEs by Q4. We need senior backend engineers. You figure out what that actually requires and build a plan that lands people, not just applications.
Speed. We move fast. That means recruiting cycles measured in weeks, not months. You need to be comfortable saying \"no, not this person\" quickly and explaining why.
Hiring strategy. This role evolves. You'll help shape what \"good\" looks like across different teams, feed signal back to leadership about what's working, what's not.
Requirements
3-5 years recruiting. Technical and/or GTM focus. You've hired multiple engineers and/or GTM roles at scale.
Opinion about good talent. You know what senior really means. You can spot signal in messy backgrounds.
No tolerance for process theater. Hiring should be fast, rigorous, and outcome-focused. Not a pipeline with five rounds for a mid-level role.
Track record. You've placed people who worked out. You've closed candidates other people couldn't.
Comfort with ambiguity. Early-stage means roles aren't locked in stone.
Compensation
We offer a competitive compensation of $150,000-$180,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\nResponsibilities \n\nYou'll support recruiting across our technical org (engineers, architects, data folks) and our GTM org (sales, CS, marketing). That means:\n\n - Building pipelines. Sourcing engineers and go-to-market talent who actually know what they're doing. You'll need conviction about who moves the needle and who doesn't.\n\n - Closing candidates. You're not just sourcing—you're selling. Why Artemis? Why now? Why this candidate specifically? You need to answer those before they do.\n\n - Working backwards from hiring plan. Sales needs 3 AEs by Q4. We need senior backend engineers. You figure out what that actually requires and build a plan that lands people, not just applications.\n\n - Speed. We move fast. That means recruiting cycles measured in weeks, not months. You need to be comfortable saying \"no, not this person\" quickly and explaining why.\n\n - Hiring strategy. This role evolves. You'll help shape what \"good\" looks like across different teams, feed signal back to leadership about what's working, what's not.\n\nRequirements \n\n - 3-5 years recruiting. Technical and/or GTM focus. You've hired multiple engineers and/or GTM roles at scale.\n\n - Opinion about good talent. You know what senior really means. You can spot signal in messy backgrounds.\n\n - No tolerance for process theater. Hiring should be fast, rigorous, and outcome-focused. Not a pipeline with five rounds for a mid-level role.\n\n - Track record. You've placed people who worked out. You've closed candidates other people couldn't.\n\n - Comfort with ambiguity. Early-stage means roles aren't locked in stone.\n\n\n\nCompensation\n\nWe offer a competitive compensation of $150,000-$180,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"84ee5dcf-4d1d-48c7-ada0-14322a5be35d","title":"Security Research Engineer","department":"Engineering","team":"Engineering","employmentType":"FullTime","location":"Remote","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-09-21T18:47:30.241+00:00","isListed":true,"isRemote":true,"workplaceType":"Remote","address":null,"jobUrl":"https://jobs.ashbyhq.com/artemis/84ee5dcf-4d1d-48c7-ada0-14322a5be35d","applyUrl":"https://jobs.ashbyhq.com/artemis/84ee5dcf-4d1d-48c7-ada0-14322a5be35d/application","descriptionHtml":"Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
We’re backed by First Round Capital, Brightmind, and a group of the cybersecurity industry’s most prominent Operators.
Our founders, Shachar (ex-Palo Alto Networks, AWS, Demisto) and Dan (ex-Abnormal Security, Twitter) have previously built, launched, and scaled cybersecurity products loved and trusted by tens of thousands of customers, and have the customer, technology, and security know-hows to deliver this vision.
Our exceptionally strong team includes software engineers, AI researchers, security engineers, and product designers hailing from Google, Abnormal AI, Wiz, Meta, AWS, CERN, SentinelOne, and more.
We are growing our team and looking for passionate builders to join us and support our expanding customer base.
Job Overview
We're looking for a Security Research Engineer to drive detection research, threat hunting, and AI-powered security automation. You'll work at the intersection of security expertise and cutting-edge AI—researching data sources, building detections, investigating real incidents, and engaging directly with customers to deliver security value. This is a hands-on, high-impact role where your work directly shapes what threats we catch and how we catch them.
Responsibilities
Develop AI-powered detection tooling - Build automation that leverages AI to accelerate detection creation, tuning, and validation at scale.
Conduct security research - Analyze cloud, identity, and SaaS data sources (AWS CloudTrail, Okta, Entra ID, and more) to extract security value and identify detection opportunities.
Perform attack simulations - Execute authorized attack simulations to validate detection coverage and identify gaps in our defenses.
Hunt for threats - Proactively search for malicious activity across customer environments using our platform and tooling.
Investigate potential cases - Analyze security incidents to demonstrate product value, refine detection logic, and deliver actionable findings.
Engage with customers - Join customer calls to present analysis results, walk through findings, and gather feedback that shapes the product.
Tune customer detections - Reduce false positives and improve detection accuracy based on real-world data and customer context.
Build investigation automation - Create AI-powered tools that scale investigation and threat hunting workflows across our platform.
Qualifications
7+ years of hands-on cybersecurity experience
Hands-on experience in incident response including cloud environments (AWS, Azure, GCP) and identity providers (Okta, Entra ID)
Strong knowledge of threat actor tactics, techniques, & procedures and demonstrated understanding uncovering threat actor activity in various environments
Strong experience with log-based analysis and demonstrated ability to identify malicious activity across a variety of log sources
Ability to translate security research into actionable detections or threat hunt investigations
Strong communication skills—comfortable explaining technical findings to engineers and customers
Experience with detection engineering at scale
Bonus:
Background working in a SOC environment or Managed Detection and Response.
Familiarity with a wide range of security tools (SIEM, EDR, SOAR)
Customer-facing technical experience
Experience with AI tools and models
Why Work at Artemis?
Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity, including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have autonomy to drive projects and support to grow.If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.
If you are passionate about cybersecurity and want to apply your expertise to build AI-powered defenses against advanced threats, we'd love to hear from you.
Compensation
We offer a competitive compensation of 160,000$- 190,000$ per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
The Role
As our first EMEA Channel Sales Manager, you'll own building Artemis's indirect go-to-market motion in the UK and Europe. You'll identify, recruit, and enable strategic partners (Distributors Value Added Resellers, MSSP’s and GSI’s) to sell Artemis into new and existing customer base. You'll develop partner programs, provide enablement and support, manage partner relationships, and ensure partners are generating pipeline and closing deals.
This role is critical to scaling beyond direct sales. You'll have autonomy to shape our channel strategy, build partner relationships from scratch, and drive significant revenue through indirect channels.
Key Responsibilities
Identify and recruit strategic channel partners (Distributors, Value Added Resellers, MSSP’s and GSI’s) across the UK and Europe
Develop and manage partnership agreements, pricing structures, and incentive programs
Onboard new partners and provide initial enablement (product training, positioning, sales tools, technical certification)
Build partner success playbooks—what works, what messaging lands, how to close deals
Conduct regular business reviews with partners to monitor pipeline, revenue, and performance
Support partner sales teams on complex deals (technical questions, customer introductions, deal strategy)
Co-market with partners (joint webinars, events, case studies, campaigns)
Manage partner portal, training materials, and go-to-market resources
Build forecasting models around partner revenue and pipeline
Identify gaps in partner coverage and recruit to fill them
Collaborate with Sales, Product, and Customer Success to ensure smooth handoffs and partner success
Hit revenue targets tied to partner-sourced deals and pipeline
What We're Looking For
5+ years in channel sales, partner sales, or indirect go-to-market roles in B2B technology or cybersecurity
Proven track record building channel programs from scratch or scaling existing programs
Strong understanding of partner types (Distributors, Value Added Resellers, MSSP’s and GSI’s) and how to recruit, enable, and manage them
Experience managing multiple partners simultaneously and hitting revenue targets
Deep network in the UK/European cybersecurity or enterprise technology space (or ability to build one quickly)
Comfortable negotiating partnerships, pricing, and incentive structures
Strong presentation and communication skills—you'll train partners and present to leadership
Project management skills—you'll own multiple workstreams and timelines
CRM and sales ops experience (Salesforce, Pipedrive, or similar)
Ability to balance structure with flexibility—partners need support, but you can't hand-hold forever
Comfortable with ambiguity and building processes from scratch
Nice to Have
Prior channel/partner experience (you've seen how they buy and what they want)
Cybersecurity or security product expertise
Experience building MDF (Marketing Development Funds) or partner incentive programs
Regional presence and relationships in UK/Europe
Experience at early-stage SaaS companies scaling go-to-market
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on: the people who determine what a threat really is, what it means for that business, and what happens next. You will be one of the few who establish how that work gets done before the team scales.
The Artemis platform is built to give you the strongest possible starting position. Detections are written for each customer's environment, cases arrive with the investigation done and the evidence assembled, response actions come staged and impact-checked, and the platform already holds a living picture of every user, device, account, and AI agent in the environment. The routine work that fills most analysts' days is handled, which means your day is spent on the work that actually calls for an expert.
You will lead investigations across cloud, identity, endpoint, and SaaS, own the decision on the cases you take, guide customers through what matters and why, and carry incidents from first signal to a clean resolution. Because you work across the full range of environments we protect, you will build fluency in modern attacker tradecraft far faster than a single environment allows. And your reach extends well past the case. You sit with the engineers building the platform, so what you learn in one investigation can ship into the product and go on protecting every customer we defend.
Responsibilities
Own the investigation and the decision - Take cases from pickup to close: establish what happened, determine the impact and blast radius, set the verdict and severity, and put your reasoning on the record. You are the one who makes the call.
Investigate with real depth - Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry: initial access, lateral movement, persistence, and exfiltration. Pair AI-assisted investigation with hands-on log analysis, and know which one to lean on for what.
Drive response, with the customer in control - Recommend and execute containment within each customer's authorized limits, with every action impact-previewed and reversible before it runs. Where the decision belongs to the customer, bring them the recommended action, its full impact, and a clear next step.
Move at the speed the threat demands - Work by risk, acknowledge and reach a verdict inside the response targets for each severity, and keep the most consequential work moving first.
Be the security partner customers trust - You are the voice the customer hears. Your summaries, your reasoning, and your final analysis reach them in your own words.
Hunt what nothing has alerted on yet - Run hypothesis-driven and AI-assisted threat hunts across customer environments, and turn what you surface into new cases and new detections.
Help design the service, not just deliver it - Founding analysts shape what Apollo becomes: the investigative standards, the response workflows, the reporting customers receive, and the console the team works in. You will be in the room where those decisions get made, and the improvements you argue for get built.
Make the platform sharper - Your verdicts, your reasoning, and the patterns you recognize feed straight into detection engineering and product, so a problem you solve once gets engineered away rather than worked twice.
Qualifications
4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment, at a senior or Tier 3 level where the investigation ended with your decision
Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
Rigor about evidence: you know what separates suspicious from confirmed, and exactly what you need to see to close that gap
Hands-on experience working with AI-assisted investigation or automation, and the judgement to know where it is strong and where it needs you
Strong customer-facing instincts. You have walked the people affected by a live security situation through what is happening and what to do about it
Excellent written communication. What you write reaches the customer as you wrote it
A high personal bar for the quality of your analysis, and a preference for being measured on it
Comfortable working a defined shift as analyst coverage expands to 24x7
Bonus
Experience in a multi-tenant MDR or MSSP practice, working across several customer environments
Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
Incident command experience, including customer executive briefings
Dedicated threat hunting or DFIR background
Daily hands-on use of AI or agentic coding tools to build your own tooling
Why Work at Artemis?
Join early enough to shape it. A founding analyst leaves fingerprints on all of it: how the service is designed, the standards the team holds, and what customers receive. The way you work a case becomes the standard the analysts who follow you learn from.
Make a real world impact. Every case you work and every call you make protects a real company and the people who depend on it. You are not working theoretical security problems, you are on the front lines of active defense, with customers who rely on the quality of your judgement.
Range you cannot get anywhere else. You work across the full set of environments we protect and the full spectrum of attacker behavior we see, so a quarter here builds experience that years inside one environment cannot.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. The platform handles the detection, investigation, and prioritization that consume most analysts' days, so your time goes to judgement, response, and the customer. You will help define what an AI-native SOC actually looks like.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have the autonomy to drive investigations, shape the platform, and own outcomes, not just follow a runbook.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Build scalable adversary emulation – Develop reusable scenarios and automation that reproduce attacker behaviors and multi-stage attack chains across cloud, identity, endpoint, SaaS, AI, and data environments. Prioritize work using threat intelligence, customer risk, and detection coverage gaps.
Validate detections end to end – Trace emulated activity through collection, normalization, enrichment, detection, and investigation. Verify expected findings and evidence, identify missed detections and visibility gaps, and distinguish successful prevention from successful detection.
Research attacks against AI systems – Investigate prompt injection, MCP and tool abuse, retrieval poisoning, excessive agent privileges, and unauthorized actions. Chain weaknesses across applications, agents, and integrations to establish realistic impact and identify detection opportunities.
Research attacks against data planes – Explore abuse of service identities, integration tokens, permissions, and data access across databases, warehouses, object storage, and AI retrieval systems. Turn access, staging, export, and cross-platform attack paths into repeatable scenarios.
Reproduce emerging exploits – Assess relevant vulnerability disclosures and exploit research in isolated labs. Establish prerequisites, practical impact, and observable behavior, then translate findings into detection hypotheses and bounded emulations.
Enable safe testing in customer environments – Build authorized emulations and control checks with clear scope, preflight checks, least-privilege access, execution limits, stop controls, and verified cleanup. Document prerequisites, expected effects, and which scenarios require an isolated lab.
Build continuous validation – Integrate scenarios with detector tests and engineering workflows. Develop AI evaluation harnesses with attack variations, multi-turn tests, and benign controls, measuring outcomes as models, tools, permissions, and detections change.
Turn research into defensive improvements – Contribute detections, hunt logic, telemetry requirements, and regression tests. Partner with engineering and customer owners to drive findings through remediation and retesting, verifying fixes against malicious and benign behavior.
Partner with the SOC and customers – Run purple-team exercises, explain findings and limitations, and give analysts the evidence and guidance needed to investigate emulated behaviors. Use AI to accelerate research and tooling while independently verifying generated actions and conclusions.
5+ years of hands-on cybersecurity experience, with substantial offensive security, red teaming, adversary emulation, or security research work; equivalent demonstrated expertise is welcome.
Strong Python skills and a track record building reusable security tools with APIs, SDKs, Git, code review, and automated testing.
Deep practical expertise in at least one cloud or identity ecosystem, with an understanding of permissions, service identities, sessions, and data access.
Practical web/API security knowledge and experience chaining weaknesses across authorization boundaries into meaningful attack paths.
Experience reproducing attacks in controlled environments and connecting the resulting behavior to audit logs, detection logic, and investigation evidence.
Experience assessing AI applications or agent workflows, or demonstrated offensive research into these systems.
Sound judgment in sensitive environments: define scope, anticipate side effects, limit impact, protect data, and verify cleanup.
Clear communication and the ability to own work from research through implementation, operational use, and verified outcomes.
Experience with Atomic Red Team, MITRE ATT&CK and ATLAS, purple teaming, or continuous security validation.
Experience with SQL, detection-as-code, and cloud, identity, SaaS, or endpoint telemetry.
Hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations.
Experience assessing data warehouses, object storage, Kubernetes, CI/CD systems, or software supply chains.
Contributions to offensive tooling, emulation frameworks, detection content, or published security research.
Experience building isolated labs and enabling customers to operate security tooling.
Make a real-world impact. Your tools and research will directly improve how real companies detect and defend against emerging threats.
Build at the intersection of AI and security. Work with security and AI engineers to test emerging attack surfaces and turn discoveries into practical defenses.
Own what you build. Take ideas from research to working capabilities used across the platform and customer environments.
Work closely with practitioners. Partner with detection engineers, researchers, and analysts who can put your work into use and help measure its impact.
We offer a competitive compensation of $180,000 – $220,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
","descriptionPlain":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\n\n\n\nRESPONSIBILITIES\n\n - Build scalable adversary emulation – Develop reusable scenarios and automation that reproduce attacker behaviors and multi-stage attack chains across cloud, identity, endpoint, SaaS, AI, and data environments. Prioritize work using threat intelligence, customer risk, and detection coverage gaps.\n\n - Validate detections end to end – Trace emulated activity through collection, normalization, enrichment, detection, and investigation. Verify expected findings and evidence, identify missed detections and visibility gaps, and distinguish successful prevention from successful detection.\n\n - Research attacks against AI systems – Investigate prompt injection, MCP and tool abuse, retrieval poisoning, excessive agent privileges, and unauthorized actions. Chain weaknesses across applications, agents, and integrations to establish realistic impact and identify detection opportunities.\n\n - Research attacks against data planes – Explore abuse of service identities, integration tokens, permissions, and data access across databases, warehouses, object storage, and AI retrieval systems. Turn access, staging, export, and cross-platform attack paths into repeatable scenarios.\n\n - Reproduce emerging exploits – Assess relevant vulnerability disclosures and exploit research in isolated labs. Establish prerequisites, practical impact, and observable behavior, then translate findings into detection hypotheses and bounded emulations.\n\n - Enable safe testing in customer environments – Build authorized emulations and control checks with clear scope, preflight checks, least-privilege access, execution limits, stop controls, and verified cleanup. Document prerequisites, expected effects, and which scenarios require an isolated lab.\n\n - Build continuous validation – Integrate scenarios with detector tests and engineering workflows. Develop AI evaluation harnesses with attack variations, multi-turn tests, and benign controls, measuring outcomes as models, tools, permissions, and detections change.\n\n - Turn research into defensive improvements – Contribute detections, hunt logic, telemetry requirements, and regression tests. Partner with engineering and customer owners to drive findings through remediation and retesting, verifying fixes against malicious and benign behavior.\n\n - Partner with the SOC and customers – Run purple-team exercises, explain findings and limitations, and give analysts the evidence and guidance needed to investigate emulated behaviors. Use AI to accelerate research and tooling while independently verifying generated actions and conclusions.\n\n\n\n\nQUALIFICATIONS\n\n - 5+ years of hands-on cybersecurity experience, with substantial offensive security, red teaming, adversary emulation, or security research work; equivalent demonstrated expertise is welcome.\n\n - Strong Python skills and a track record building reusable security tools with APIs, SDKs, Git, code review, and automated testing.\n\n - Deep practical expertise in at least one cloud or identity ecosystem, with an understanding of permissions, service identities, sessions, and data access.\n\n - Practical web/API security knowledge and experience chaining weaknesses across authorization boundaries into meaningful attack paths.\n\n - Experience reproducing attacks in controlled environments and connecting the resulting behavior to audit logs, detection logic, and investigation evidence.\n\n - Experience assessing AI applications or agent workflows, or demonstrated offensive research into these systems.\n\n - Sound judgment in sensitive environments: define scope, anticipate side effects, limit impact, protect data, and verify cleanup.\n\n - Clear communication and the ability to own work from research through implementation, operational use, and verified outcomes.\n\n\n\n\nBONUS\n\n - Experience with Atomic Red Team, MITRE ATT&CK and ATLAS, purple teaming, or continuous security validation.\n\n - Experience with SQL, detection-as-code, and cloud, identity, SaaS, or endpoint telemetry.\n\n - Hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations.\n\n - Experience assessing data warehouses, object storage, Kubernetes, CI/CD systems, or software supply chains.\n\n - Contributions to offensive tooling, emulation frameworks, detection content, or published security research.\n\n - Experience building isolated labs and enabling customers to operate security tooling.\n\n\n\n\nWHY WORK AT ARTEMIS?\n\n - Make a real-world impact. Your tools and research will directly improve how real companies detect and defend against emerging threats.\n\n - Build at the intersection of AI and security. Work with security and AI engineers to test emerging attack surfaces and turn discoveries into practical defenses.\n\n - Own what you build. Take ideas from research to working capabilities used across the platform and customer environments.\n\n - Work closely with practitioners. Partner with detection engineers, researchers, and analysts who can put your work into use and help measure its impact.\n\n\n\n\nCOMPENSATION\n\nWe offer a competitive compensation of $180,000 – $220,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"c4937e52-b8e0-45d2-871a-77bf957038ab","title":"Senior Security Analyst (MDR-Australia)","department":"Engineering","team":"Engineering","employmentType":"FullTime","location":"Australia","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-10-11T22:19:08.851+00:00","isListed":true,"isRemote":true,"workplaceType":"Remote","address":{"postalAddress":{"addressCountry":"Australia"}},"jobUrl":"https://jobs.ashbyhq.com/artemis/c4937e52-b8e0-45d2-871a-77bf957038ab","applyUrl":"https://jobs.ashbyhq.com/artemis/c4937e52-b8e0-45d2-871a-77bf957038ab/application","descriptionHtml":"Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on: the people who determine what a threat really is, what it means for that business, and what happens next. You will be one of the few who establish how that work gets done before the team scales.
The Artemis platform is built to give you the strongest possible starting position. Detections are written for each customer's environment, cases arrive with the investigation done and the evidence assembled, response actions come staged and impact-checked, and the platform already holds a living picture of every user, device, account, and AI agent in the environment. The routine work that fills most analysts' days is handled, which means your day is spent on the work that actually calls for an expert.
You will lead investigations across cloud, identity, endpoint, and SaaS, own the decision on the cases you take, guide customers through what matters and why, and carry incidents from first signal to a clean resolution. Because you work across the full range of environments we protect, you will build fluency in modern attacker tradecraft far faster than a single environment allows. And your reach extends well past the case. You sit with the engineers building the platform, so what you learn in one investigation can ship into the product and go on protecting every customer we defend.
Responsibilities
Own the investigation and the decision - Take cases from pickup to close: establish what happened, determine the impact and blast radius, set the verdict and severity, and put your reasoning on the record. You are the one who makes the call.
Investigate with real depth - Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry: initial access, lateral movement, persistence, and exfiltration. Pair AI-assisted investigation with hands-on log analysis, and know which one to lean on for what.
Drive response, with the customer in control - Recommend and execute containment within each customer's authorized limits, with every action impact-previewed and reversible before it runs. Where the decision belongs to the customer, bring them the recommended action, its full impact, and a clear next step.
Move at the speed the threat demands - Work by risk, acknowledge and reach a verdict inside the response targets for each severity, and keep the most consequential work moving first.
Be the security partner customers trust - You are the voice the customer hears. Your summaries, your reasoning, and your final analysis reach them in your own words.
Hunt what nothing has alerted on yet - Run hypothesis-driven and AI-assisted threat hunts across customer environments, and turn what you surface into new cases and new detections.
Help design the service, not just deliver it - Founding analysts shape what Apollo becomes: the investigative standards, the response workflows, the reporting customers receive, and the console the team works in. You will be in the room where those decisions get made, and the improvements you argue for get built.
Make the platform sharper - Your verdicts, your reasoning, and the patterns you recognize feed straight into detection engineering and product, so a problem you solve once gets engineered away rather than worked twice.
Qualifications
4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment, at a senior or Tier 3 level where the investigation ended with your decision
Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
Rigor about evidence: you know what separates suspicious from confirmed, and exactly what you need to see to close that gap
Hands-on experience working with AI-assisted investigation or automation, and the judgement to know where it is strong and where it needs you
Strong customer-facing instincts. You have walked the people affected by a live security situation through what is happening and what to do about it
Excellent written communication. What you write reaches the customer as you wrote it
A high personal bar for the quality of your analysis, and a preference for being measured on it
Comfortable working a defined shift as analyst coverage expands to 24x7
Bonus
Experience in a multi-tenant MDR or MSSP practice, working across several customer environments
Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
Incident command experience, including customer executive briefings
Dedicated threat hunting or DFIR background
Daily hands-on use of AI or agentic coding tools to build your own tooling
Why Work at Artemis?
Join early enough to shape it. A founding analyst leaves fingerprints on all of it: how the service is designed, the standards the team holds, and what customers receive. The way you work a case becomes the standard the analysts who follow you learn from.
Make a real world impact. Every case you work and every call you make protects a real company and the people who depend on it. You are not working theoretical security problems, you are on the front lines of active defense, with customers who rely on the quality of your judgement.
Range you cannot get anywhere else. You work across the full set of environments we protect and the full spectrum of attacker behavior we see, so a quarter here builds experience that years inside one environment cannot.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. The platform handles the detection, investigation, and prioritization that consume most analysts' days, so your time goes to judgement, response, and the customer. You will help define what an AI-native SOC actually looks like.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have the autonomy to drive investigations, shape the platform, and own outcomes, not just follow a runbook.
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
Job Overview
We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on: the people who determine what a threat really is, what it means for that business, and what happens next. You will be one of the few who establish how that work gets done before the team scales.
The Artemis platform is built to give you the strongest possible starting position. Detections are written for each customer's environment, cases arrive with the investigation done and the evidence assembled, response actions come staged and impact-checked, and the platform already holds a living picture of every user, device, account, and AI agent in the environment. The routine work that fills most analysts' days is handled, which means your day is spent on the work that actually calls for an expert.
You will lead investigations across cloud, identity, endpoint, and SaaS, own the decision on the cases you take, guide customers through what matters and why, and carry incidents from first signal to a clean resolution. Because you work across the full range of environments we protect, you will build fluency in modern attacker tradecraft far faster than a single environment allows. And your reach extends well past the case. You sit with the engineers building the platform, so what you learn in one investigation can ship into the product and go on protecting every customer we defend.
Responsibilities
Own the investigation and the decision - Take cases from pickup to close: establish what happened, determine the impact and blast radius, set the verdict and severity, and put your reasoning on the record. You are the one who makes the call.
Investigate with real depth - Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry: initial access, lateral movement, persistence, and exfiltration. Pair AI-assisted investigation with hands-on log analysis, and know which one to lean on for what.
Drive response, with the customer in control - Recommend and execute containment within each customer's authorized limits, with every action impact-previewed and reversible before it runs. Where the decision belongs to the customer, bring them the recommended action, its full impact, and a clear next step.
Move at the speed the threat demands - Work by risk, acknowledge and reach a verdict inside the response targets for each severity, and keep the most consequential work moving first.
Be the security partner customers trust - You are the voice the customer hears. Your summaries, your reasoning, and your final analysis reach them in your own words.
Hunt what nothing has alerted on yet - Run hypothesis-driven and AI-assisted threat hunts across customer environments, and turn what you surface into new cases and new detections.
Help design the service, not just deliver it - Founding analysts shape what Apollo becomes: the investigative standards, the response workflows, the reporting customers receive, and the console the team works in. You will be in the room where those decisions get made, and the improvements you argue for get built.
Make the platform sharper - Your verdicts, your reasoning, and the patterns you recognize feed straight into detection engineering and product, so a problem you solve once gets engineered away rather than worked twice.
Qualifications
4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment, at a senior or Tier 3 level where the investigation ended with your decision
Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace)
Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry
Rigor about evidence: you know what separates suspicious from confirmed, and exactly what you need to see to close that gap
Hands-on experience working with AI-assisted investigation or automation, and the judgement to know where it is strong and where it needs you
Strong customer-facing instincts. You have walked the people affected by a live security situation through what is happening and what to do about it
Excellent written communication. What you write reaches the customer as you wrote it
A high personal bar for the quality of your analysis, and a preference for being measured on it
Comfortable working a defined shift as analyst coverage expands to 24x7
Bonus
Experience in a multi-tenant MDR or MSSP practice, working across several customer environments
Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar)
Incident command experience, including customer executive briefings
Dedicated threat hunting or DFIR background
Daily hands-on use of AI or agentic coding tools to build your own tooling
Compensation
We offer a competitive compensation of $120,000-$160,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Why Work at Artemis?
Join early enough to shape it. A founding analyst leaves fingerprints on all of it: how the service is designed, the standards the team holds, and what customers receive. The way you work a case becomes the standard the analysts who follow you learn from.
Make a real world impact. Every case you work and every call you make protects a real company and the people who depend on it. You are not working theoretical security problems, you are on the front lines of active defense, with customers who rely on the quality of your judgement.
Range you cannot get anywhere else. You work across the full set of environments we protect and the full spectrum of attacker behavior we see, so a quarter here builds experience that years inside one environment cannot.
Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
Push the boundaries of technology. The platform handles the detection, investigation, and prioritization that consume most analysts' days, so your time goes to judgement, response, and the customer. You will help define what an AI-native SOC actually looks like.
Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have the autonomy to drive investigations, shape the platform, and own outcomes, not just follow a runbook.
About Artemis
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
The Role
We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.
You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. You will grow the team - hire, coach, and lead analysts, and set the standards they work to. You’ll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.
Responsibilities
Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs
Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management
Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS
Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end
Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact
Hire, onboard, and grow the MDR analyst team as demand scales
Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source
Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews
Set on-call and coverage policies that are sustainable for the team
Qualifications
5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function
Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs
Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure
Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment
Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL
Clear communicator who can brief customers and executives during active incidents
Comfortable making decisions with incomplete information and owning the outcome
Fluent in English (Hebrew is a plus)
Nice to Have
Prior experience at an MDR provider or a managed security services team
Experience selling into or supporting enterprise customers during security escalations
Background in detection engineering or threat hunting
Experience building runbooks or automation that reduced analyst workload
Relevant certifications such as GCIH, GCIA, OSCP, or equivalent
About Artemis
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
We’re looking for a Cyber Threat Intelligence Researcher to lead original threat research and drive Artemis’s managed threat intelligence strategy. You’ll investigate emerging threats, track attacker behavior, publish research, and build threat hunts that help customers discover activity their existing defenses may miss. Your work will connect what’s happening in the threat landscape to what matters in real customer environments.
This is an individual contributor (IC) role focused primarily on hands-on research. You’ll personally develop hypotheses, analyze telemetry, investigate campaigns, write blogs and intelligence reports, and turn discoveries into repeatable hunts. You’ll own research from the initial question through publication and operational use, partnering with detection engineers, offensive security, analysts, and product teams to translate intelligence into better protection.
Conduct original threat research – Investigate emerging campaigns, attacker infrastructure, exploitation techniques, and changes in adversary tradecraft across cloud, identity, endpoint, SaaS, AI, and data environments. Combine external reporting with authorized telemetry analysis to develop findings grounded in evidence.
Drive managed threat intelligence strategy – Own the research roadmap and intelligence priorities for Artemis’s managed offering. Define the threats and questions that matter to customers, evaluate intelligence sources and partners, and establish how intelligence is collected, assessed, delivered, and kept current.
Publish research and blogs – Write original technical blogs, campaign analyses, threat advisories, and research reports that establish Artemis as a trusted source of security insight. Explain attack behavior, supporting evidence, defensive implications, and practical hunting guidance for technical and executive audiences.
Build and execute threat hunts – Translate novel threats and research hypotheses into hunts across customer environments. Identify relevant telemetry, develop queries and behavioral correlations, investigate results, and turn successful approaches into reusable hunt templates with clear prerequisites and limitations.
Track actors and campaigns – Connect infrastructure, tooling, victimology, and observed behaviors across investigations. Maintain useful campaign and activity-cluster assessments, clearly separating observed facts, analytical judgments, confidence levels, and attribution uncertainty.
Operationalize intelligence – Partner with detection engineers and the SOC to turn research into detections, investigation guidance, enrichment, and response recommendations. Manage the quality and lifecycle of indicators and intelligence content, including provenance, relevance, confidence, and expiration.
Research threats involving AI – Investigate how attackers use AI and how they target AI applications, agents, tools, and connected data. Develop practical hypotheses and hunts for emerging abuse, distinguishing demonstrated activity from speculation and identifying where additional telemetry is needed.
Build research automation – Use Python, APIs, and AI-assisted workflows to accelerate collection, enrichment, correlation, and analysis. Verify sources and conclusions independently, preserve evidence, and build repeatable workflows that scale research without sacrificing analytical quality.
Deliver actionable customer intelligence – Brief customers and internal teams on relevant developments, explain exposure and observed activity, and recommend concrete next steps. Measure impact through useful hunts, coverage improvements, and customer decisions, and use feedback to refine the intelligence program.
5+ years of hands-on cybersecurity experience, with substantial work in threat intelligence, threat research, threat hunting, or incident investigation; equivalent demonstrated expertise is welcome.
A track record of producing original, evidence-backed research and clear technical writing. Published work, anonymized reports, or other substantive research samples can demonstrate this experience.
Strong understanding of attacker tactics, techniques, and procedures, with depth in at least one relevant area such as cloud and identity attacks, SaaS compromise, cybercrime campaigns, or targeted intrusions.
Experience developing and executing hypothesis-driven hunts, analyzing security telemetry, and correlating activity across sources using SQL, KQL, SPL, or similar query languages.
Experience turning intelligence into operational outcomes, including detections, hunt content, incident insights, or customer guidance.
Practical Python and API skills for research automation, enrichment, and data analysis, with sound judgment when using AI to support research.
Strong analytical discipline: evaluate source reliability, test alternative explanations, communicate confidence, and avoid overstating attribution or coverage.
Ability to prioritize research around customer risk, own work through delivery, and explain technical findings clearly to practitioners and leadership.
Good judgment handling sensitive telemetry, source restrictions, and publication review, including protecting customer identities and confidential information.
Experience building or operating a managed threat intelligence service, defining intelligence requirements, or evaluating commercial and open-source intelligence feeds.
Research into AI-enabled attacks, agent security, software supply chains, or threats against data platforms.
Experience with malware analysis, infrastructure tracking, passive DNS, sandboxing, or adversary emulation.
Familiarity with MITRE ATT&CK and ATLAS, STIX/TAXII, intelligence platforms, or detection-as-code workflows.
Contributions to public research, conference talks, open-source intelligence tooling, hunt libraries, or detection content.
Customer-facing experience delivering threat briefings, research findings, or hunting outcomes in an MDR, MSSP, or security product environment.
Make a real-world impact. Turn research into hunts, detections, and intelligence that help real companies identify and defend against emerging threats.
Shape our research voice. Publish original work and help define how Artemis contributes to the security community.
Own the intelligence strategy. Build a managed threat intelligence capability informed by customer environments and measurable defensive outcomes.
Work closely with practitioners. Partner with detection engineers, offensive researchers, analysts, and AI engineers who can put your findings into action.
Compensation
We offer a competitive compensation of $160,000-$200,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
Equal Opportunity
At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.
","descriptionPlain":"About Artemis\n\nArtemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\n\nABOUT THE ROLE\n\nWe’re looking for a Cyber Threat Intelligence Researcher to lead original threat research and drive Artemis’s managed threat intelligence strategy. You’ll investigate emerging threats, track attacker behavior, publish research, and build threat hunts that help customers discover activity their existing defenses may miss. Your work will connect what’s happening in the threat landscape to what matters in real customer environments.\n\nThis is an individual contributor (IC) role focused primarily on hands-on research. You’ll personally develop hypotheses, analyze telemetry, investigate campaigns, write blogs and intelligence reports, and turn discoveries into repeatable hunts. You’ll own research from the initial question through publication and operational use, partnering with detection engineers, offensive security, analysts, and product teams to translate intelligence into better protection.\n\n\n\n\nRESPONSIBILITIES\n\n - Conduct original threat research – Investigate emerging campaigns, attacker infrastructure, exploitation techniques, and changes in adversary tradecraft across cloud, identity, endpoint, SaaS, AI, and data environments. Combine external reporting with authorized telemetry analysis to develop findings grounded in evidence.\n\n - Drive managed threat intelligence strategy – Own the research roadmap and intelligence priorities for Artemis’s managed offering. Define the threats and questions that matter to customers, evaluate intelligence sources and partners, and establish how intelligence is collected, assessed, delivered, and kept current.\n\n - Publish research and blogs – Write original technical blogs, campaign analyses, threat advisories, and research reports that establish Artemis as a trusted source of security insight. Explain attack behavior, supporting evidence, defensive implications, and practical hunting guidance for technical and executive audiences.\n\n - Build and execute threat hunts – Translate novel threats and research hypotheses into hunts across customer environments. Identify relevant telemetry, develop queries and behavioral correlations, investigate results, and turn successful approaches into reusable hunt templates with clear prerequisites and limitations.\n\n - Track actors and campaigns – Connect infrastructure, tooling, victimology, and observed behaviors across investigations. Maintain useful campaign and activity-cluster assessments, clearly separating observed facts, analytical judgments, confidence levels, and attribution uncertainty.\n\n - Operationalize intelligence – Partner with detection engineers and the SOC to turn research into detections, investigation guidance, enrichment, and response recommendations. Manage the quality and lifecycle of indicators and intelligence content, including provenance, relevance, confidence, and expiration.\n\n - Research threats involving AI – Investigate how attackers use AI and how they target AI applications, agents, tools, and connected data. Develop practical hypotheses and hunts for emerging abuse, distinguishing demonstrated activity from speculation and identifying where additional telemetry is needed.\n\n - Build research automation – Use Python, APIs, and AI-assisted workflows to accelerate collection, enrichment, correlation, and analysis. Verify sources and conclusions independently, preserve evidence, and build repeatable workflows that scale research without sacrificing analytical quality.\n\n - Deliver actionable customer intelligence – Brief customers and internal teams on relevant developments, explain exposure and observed activity, and recommend concrete next steps. Measure impact through useful hunts, coverage improvements, and customer decisions, and use feedback to refine the intelligence program.\n\n\n\n\nQUALIFICATIONS\n\n - 5+ years of hands-on cybersecurity experience, with substantial work in threat intelligence, threat research, threat hunting, or incident investigation; equivalent demonstrated expertise is welcome.\n\n - A track record of producing original, evidence-backed research and clear technical writing. Published work, anonymized reports, or other substantive research samples can demonstrate this experience.\n\n - Strong understanding of attacker tactics, techniques, and procedures, with depth in at least one relevant area such as cloud and identity attacks, SaaS compromise, cybercrime campaigns, or targeted intrusions.\n\n - Experience developing and executing hypothesis-driven hunts, analyzing security telemetry, and correlating activity across sources using SQL, KQL, SPL, or similar query languages.\n\n - Experience turning intelligence into operational outcomes, including detections, hunt content, incident insights, or customer guidance.\n\n - Practical Python and API skills for research automation, enrichment, and data analysis, with sound judgment when using AI to support research.\n\n - Strong analytical discipline: evaluate source reliability, test alternative explanations, communicate confidence, and avoid overstating attribution or coverage.\n\n - Ability to prioritize research around customer risk, own work through delivery, and explain technical findings clearly to practitioners and leadership.\n\n - Good judgment handling sensitive telemetry, source restrictions, and publication review, including protecting customer identities and confidential information.\n\n\nBONUS\n\n - Experience building or operating a managed threat intelligence service, defining intelligence requirements, or evaluating commercial and open-source intelligence feeds.\n\n - Research into AI-enabled attacks, agent security, software supply chains, or threats against data platforms.\n\n - Experience with malware analysis, infrastructure tracking, passive DNS, sandboxing, or adversary emulation.\n\n - Familiarity with MITRE ATT&CK and ATLAS, STIX/TAXII, intelligence platforms, or detection-as-code workflows.\n\n - Contributions to public research, conference talks, open-source intelligence tooling, hunt libraries, or detection content.\n\n - Customer-facing experience delivering threat briefings, research findings, or hunting outcomes in an MDR, MSSP, or security product environment.\n\n\nWHY WORK AT ARTEMIS?\n\n - Make a real-world impact. Turn research into hunts, detections, and intelligence that help real companies identify and defend against emerging threats.\n\n - Shape our research voice. Publish original work and help define how Artemis contributes to the security community.\n\n - Own the intelligence strategy. Build a managed threat intelligence capability informed by customer environments and measurable defensive outcomes.\n\n - Work closely with practitioners. Partner with detection engineers, offensive researchers, analysts, and AI engineers who can put your findings into action.\n\nCompensation\n\nWe offer a competitive compensation of $160,000-$200,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.\n\nEqual Opportunity\n\nAt Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}},{"id":"e6268f64-1819-41e8-ad66-8861419d68f1","title":"IT Engineer","department":"Engineering","team":"Engineering","employmentType":"FullTime","location":"New York City","shouldDisplayCompensationOnJobPostings":false,"secondaryLocations":[],"publishedAt":"2026-11-03T03:34:22.070+00:00","isListed":true,"isRemote":false,"workplaceType":"OnSite","address":{"postalAddress":{"postalCode":"10001","addressRegion":"New York","streetAddress":"109 W 27th St, Floor 8","addressCountry":"United States","addressLocality":"New York City"}},"jobUrl":"https://jobs.ashbyhq.com/artemis/e6268f64-1819-41e8-ad66-8861419d68f1","applyUrl":"https://jobs.ashbyhq.com/artemis/e6268f64-1819-41e8-ad66-8861419d68f1/application","descriptionHtml":"About Artemis
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
As our IT Engineer, you'll own the systems every Artemis employee depends on to do their job: identity, devices, SaaS, and the onboarding and offboarding flows that tie them together. We sell security, so our own environment has to be a model of it. You'll build IT that is secure by default, automated wherever possible, and ready to scale from 55 to several hundred people across the US and UK.
This is a hands-on, high-ownership role. You'll work closely with our security and operations teams and have real say in the tools and architecture we standardize on.
Own identity and access management: SSO, MFA, and role-based access across our SaaS stack, with automated provisioning and deprovisioning tied to our HRIS
Deploy and manage our device fleet (primarily macOS) through MDM, including enrollment, configuration baselines, patching, disk encryption, and EDR coverage
Build zero-touch onboarding so new hires are productive on day one, and offboarding that removes access within minutes, not days
Run SaaS administration and lifecycle management: evaluating tools, managing licenses, and cutting sprawl and spend
Automate repetitive IT work with scripts and workflow tools rather than tickets
Partner with security to produce and maintain the controls and evidence behind our SOC 2 Type II and ISO 27001 programs
Stand up IT for our UK expansion, including hardware procurement, shipping, and region-specific requirements
Serve as the escalation point for internal IT support, and build the documentation and self-service that keep support volume low as we grow
4+ years in IT engineering or systems administration, ideally at a high-growth startup or security-focused company
Hands-on experience administering an identity provider such as Okta, Google Workspace, or Entra ID, including SSO, SCIM, and conditional access
Deep experience managing macOS fleets through an MDM such as Jamf or Kandji
Working knowledge of endpoint security tooling and how device posture feeds into access decisions
Scripting ability in Python, Bash, or PowerShell, and a habit of automating anything you've done twice
Experience supporting compliance audits like SOC 2 or ISO 27001, including owning controls and producing evidence
Sound judgment on tradeoffs between security, cost, and employee experience, and the ability to explain those tradeoffs clearly
You've been the first or only IT hire and built the function from scratch
Experience with workflow automation platforms such as Okta Workflows, Zapier, or Tines
Familiarity with cloud environments (AWS, GCP) and infrastructure-as-code
Experience supporting a distributed team across the US and UK or EU
Relevant certifications such as Jamf, Okta, or Apple certifications
We offer a competitive compensation of $160,000-$180,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.
","descriptionPlain":"About Artemis\n\nArtemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.\n\nOur platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.\n\nWe have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.\n\nArtemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.\n\nOur team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.\n\nWe’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.\n\n\n\n\n\n\nTHE ROLE\n\nAs our IT Engineer, you'll own the systems every Artemis employee depends on to do their job: identity, devices, SaaS, and the onboarding and offboarding flows that tie them together. We sell security, so our own environment has to be a model of it. You'll build IT that is secure by default, automated wherever possible, and ready to scale from 55 to several hundred people across the US and UK.\n\nThis is a hands-on, high-ownership role. You'll work closely with our security and operations teams and have real say in the tools and architecture we standardize on.\n\n\n\n\nRESPONSIBILITIES \n\n - Own identity and access management: SSO, MFA, and role-based access across our SaaS stack, with automated provisioning and deprovisioning tied to our HRIS\n\n - Deploy and manage our device fleet (primarily macOS) through MDM, including enrollment, configuration baselines, patching, disk encryption, and EDR coverage\n\n - Build zero-touch onboarding so new hires are productive on day one, and offboarding that removes access within minutes, not days\n\n - Run SaaS administration and lifecycle management: evaluating tools, managing licenses, and cutting sprawl and spend\n\n - Automate repetitive IT work with scripts and workflow tools rather than tickets\n\n - Partner with security to produce and maintain the controls and evidence behind our SOC 2 Type II and ISO 27001 programs\n\n - Stand up IT for our UK expansion, including hardware procurement, shipping, and region-specific requirements\n\n - Serve as the escalation point for internal IT support, and build the documentation and self-service that keep support volume low as we grow\n\n\nQUALIFICATIONS\n\n - 4+ years in IT engineering or systems administration, ideally at a high-growth startup or security-focused company\n\n - Hands-on experience administering an identity provider such as Okta, Google Workspace, or Entra ID, including SSO, SCIM, and conditional access\n\n - Deep experience managing macOS fleets through an MDM such as Jamf or Kandji\n\n - Working knowledge of endpoint security tooling and how device posture feeds into access decisions\n\n - Scripting ability in Python, Bash, or PowerShell, and a habit of automating anything you've done twice\n\n - Experience supporting compliance audits like SOC 2 or ISO 27001, including owning controls and producing evidence\n\n - Sound judgment on tradeoffs between security, cost, and employee experience, and the ability to explain those tradeoffs clearly\n\n\nNICE TO HAVE\n\n - You've been the first or only IT hire and built the function from scratch\n\n - Experience with workflow automation platforms such as Okta Workflows, Zapier, or Tines\n\n - Familiarity with cloud environments (AWS, GCP) and infrastructure-as-code\n\n - Experience supporting a distributed team across the US and UK or EU\n\n - Relevant certifications such as Jamf, Okta, or Apple certifications\n\n\n\n\nCOMPENSATION\n\nWe offer a competitive compensation of $160,000-$180,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.","compensation":{"compensationTierSummary":null,"scrapeableCompensationSalarySummary":null,"compensationTiers":[],"summaryComponents":[]}}],"apiVersion":"1"}