MDR Lead (Israel)
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 5h ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 6d ago
The date the source published, not the day we noticed it (2026-10-26). Last seen at its source 1h ago.
We have tracked this listing since 26 Oct 2026 (6 days). The employer's own board has carried it every time we have read it, most recently 1 hour ago.
Is it remote?
Marked remote on the employer's board
Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.
Who may apply?
Israel
The description states no restriction of its own. This is the source's own tag.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Ashby employer's own board first seen 6d ago · last seen 1h ago
The listing
About Artemis
Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.
Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.
We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.
Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.
Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.
We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.
The Role
We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.
You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. You will grow the team - hire, coach, and lead analysts, and set the standards they work to. You’ll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.
Responsibilities
Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs
Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management
Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS
Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end
Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact
Hire, onboard, and grow the MDR analyst team as demand scales
Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source
Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews
Set on-call and coverage policies that are sustainable for the team
Qualifications
5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function
Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs
Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure
Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment
Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL
Clear communicator who can brief customers and executives during active incidents
Comfortable making decisions with incomplete information and owning the outcome
Fluent in English (Hebrew is a plus)
Nice to Have
Prior experience at an MDR provider or a managed security services team
Experience selling into or supporting enterprise customers during security escalations
Background in detection engineering or threat hunting
Experience building runbooks or automation that reduced analyst workload
Relevant certifications such as GCIH, GCIA, OSCP, or equivalent