Senior Security Analyst, MDR
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Analyst joining Artemis's MDR service, Apollo, as a founding analyst. Investigating and responding to threats across customer cloud, identity, endpoint, and SaaS environments.
Responsibilities:
- Join Apollo, Artemis's managed detection and response service, as one of its founding analysts
- Take security cases from pickup to close
- Establish what happened, determine impact and blast radius, set verdict and severity, and document reasoning
- Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry
- Investigate initial access, lateral movement, persistence, and exfiltration
- Combine AI-assisted investigation with hands-on log analysis
- Recommend and execute containment within each customer's authorized limits
- Preview and assess the impact of response actions before execution, keeping actions reversible
- Present customers with recommended actions, full impact, and clear next steps when customer approval is required
- Acknowledge cases and reach verdicts within response targets according to severity
- Prioritize consequential work based on risk
- Communicate case summaries, reasoning, and final analysis directly to customers
- Run hypothesis-driven and AI-assisted threat hunts across customer environments
- Turn threat-hunting findings into new cases and detections
- Help design investigative standards, response workflows, customer reporting, and the analyst console
- Feed verdicts, reasoning, and recognized patterns into detection engineering and product improvements
Requirements:
- 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment
- Senior or Tier 3 level experience where investigations ended with the candidate's decision
- Proven investigation depth across identity platforms: Okta and Entra ID
- Proven investigation depth across cloud platforms: AWS, Azure, and GCP
- Proven investigation depth across endpoint detection and response (EDR)
- Proven investigation depth across SaaS platforms: Microsoft 365 and Google Workspace
- Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK)
- Strong evidence-based investigative judgment
- Hands-on experience with AI-assisted investigation or automation
- Customer-facing experience explaining live security situations and recommended actions
- Excellent written communication
- Comfortable working a defined shift as analyst coverage expands to 24x7
- Bonus: experience in a multi-tenant MDR or MSSP practice
- Bonus: experience writing or tuning detection rules using Sigma, YARA-L, SPL, KQL, or similar
- Bonus: incident command experience, including customer executive briefings
- Bonus: dedicated threat hunting or DFIR background
- Bonus: daily hands-on use of AI or agentic coding tools to build personal tooling
Benefits:
- Autonomy to drive investigations, shape the platform, and own outcomes
- Open communication, mentorship and learning
- Opportunity to shape the service, investigative standards, response workflows, customer reporting, and analyst console as a founding analyst
- Exposure to a broad range of cloud, identity, endpoint, SaaS environments, and attacker behavior
- Opportunity to work with AI-native cybersecurity technology
- Opportunity to learn and develop rapidly
- Impactful work protecting real companies and their employees
- Innovative culture focused on customers, speed, quality, mentorship, and learning
Similar Jobs
Identity & Access Management Analyst – IT Security
Remote IAM Analyst managing access controls, provisioning, PAM, MFA, and compliance for Guthrie’s integrated nonprofit healthcare organization.
Compliance & Security Analyst
Compliance analyst leading CMMC 2.0 and NIST 800-171 readiness for Logicalis clients. Authoring SSPs, managing remediation, and validating audit evidence.
Information Security Compliance Analyst
Information Security Compliance Analyst strengthening Data Recognition Corporation’s security compliance program. Managing GovRAMP, NIST RMF, SOC 2 audits, risk remediation, and business continuity initiatives.
Security Analyst – Penetration Testing
Analista de segurança conduzindo testes de intrusão e avaliações de vulnerabilidades para proteger clientes digitais da Stefanini Cyber. Atuando em ambientes web, mobile, cloud, AD e IoT/OT.
Security Analyst
Security Analyst managing vulnerability scanning and exposure programs for GuidePoint Security, a cybersecurity services provider. Advising customers and deploying vulnerability infrastructure across cloud and on-premise environments.
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Senior Security Analyst, MDR
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.
Cyber Security Analyst III – Digital Forensics, Incident Response
Cybersecurity analyst conducting digital forensics and incident response for the U.S. Department of Energy Hanford Site. Monitoring enterprise threats, investigating incidents, and supporting remediation.
Cybersecurity Analyst
Analista de Cyber Security protegendo soluções digitais da Click Cannabis para acesso responsável à cannabis medicinal. Condução de pentests, DevSecOps, segurança AWS e resposta a incidentes.
Principal Research Analyst – Information Security
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.
IT Security Analyst
IT Security Analyst supporting Signode’s SOC through threat detection, incident response, and malware analysis. Monitoring alerts, hunting threats, and improving security operations processes.
Associate Security Analyst
Security Analyst monitoring client environments, investigating threats, and tuning SIEM detections. DirectDefense delivers managed cybersecurity defense, vulnerability assessments, and compliance services.
Security Analyst
T1 Security Analyst investigating security incidents and logs for Playtech, a global gaming technology company. Supporting incident response and security infrastructure across 24/7 operations.
Analista de Seguridad de la Información – Semi Senior
Analista de Seguridad de la Información apoyando la operación de ciberseguridad de Stefanini. Monitoreando alertas, afinando reglas y analizando riesgos, vulnerabilidades y controles.
Information Security Compliance Analyst
Information security compliance analyst supporting ImageTrend’s healthcare and emergency-response software platforms. Coordinating audits, risk management, cloud compliance, and security controls across AWS and Azure.