Description review
MDR Lead (Israel)
Artemis · Remote - Israel · back to the listing
HR standards
68/100
needs work
Title ↔ description
92/100
strong
Reads as
Security Engineer
88% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 22 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
About Artemis
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
The Role
We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.
You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. As the team grows, you'll hire, coach, and lead analysts, and set the standards they work to. You'll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.
Responsibilities
• Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs
• Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management
• Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS
• Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end
• Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact
• Hire, onboard, and grow the MDR analyst team as demand scales
• Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source
• Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews
• Set on-call and coverage policies that are sustainable for the team
Qualifications
• 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function
• Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs
• Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure
• Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment
• Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL
• Clear communicator who can brief customers and executives during active incidents
• Comfortable making decisions with incomplete information and owning the outcome
• Fluent in English (Hebrew is a plus)
Nice to Have
• Prior experience at an MDR provider or a managed security services team
• Experience selling into or supporting enterprise customers during security escalations
• Background in detection engineering or threat hunting
• Experience building runbooks or automation that reduced analyst workload
• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
The Role
We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.
You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. As the team grows, you'll hire, coach, and lead analysts, and set the standards they work to. You'll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.
Responsibilities
• Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs
• Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management
• Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS
• Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end
• Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact
• Hire, onboard, and grow the MDR analyst team as demand scales
• Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source
• Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews
• Set on-call and coverage policies that are sustainable for the team
Qualifications
• 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function
• Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs
• Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure
• Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment
• Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL
• Clear communicator who can brief customers and executives during active incidents
• Comfortable making decisions with incomplete information and owning the outcome
• Fluent in English (Hebrew is a plus)
Nice to Have
• Prior experience at an MDR provider or a managed security services team
• Experience selling into or supporting enterprise customers during security escalations
• Background in detection engineering or threat hunting
• Experience building runbooks or automation that reduced analyst workload
• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent