Security Analyst - Tier 2

sevenai; Boston (MA); On-site; USD 85,000 - 120,000; Full time

Job summary

7AI is seeking a Security Analyst to validate and extend the work of AI agents, investigate malicious activity, and hunt for threats within customer environments. You’ll work directly with customers—from SOC analysts to CISOs—to triage alerts and resolve incidents, shaping how this team operates as we grow.

Two or more years in security operations are required, with strong skills in SIEM/XDR, MITRE ATT&CK, and incident response.

Qualifications

• 2+ years in security operations or SOC roles.
• Comfortable with on-call weekend shifts when needed.
• Hands-on experience investigating alerts across endpoint, network, identity, email and cloud.
• Strong understanding of monitoring tools: XDR, SIEM, IDS/IPS, IDP.
• Familiarity with log and telemetry concepts.
• Knowledge of MITRE ATT&CK and incident triage methodologies.
• Experience querying SIEM data with SPL, KQL, FQL, or SQL.
• Familiarity with malware analysis methods.

Responsibilities

• Analyze and validate AI agent investigations for accuracy and risk.
• Correlate data across cloud, endpoint, identity, and network sources.
• Investigate malicious activity detected by 7AI agents and assess risk prevented.
• Use 7AI agents to hunt for emerging threats in customer environments.
• Assist customers with threat monitoring, triage, and alert prioritization during incidents.
• Review logs to proactively spot threats and anomalies in customer environments.
• Communicate findings to customers with varying technical backgrounds.
• Help build repeatable processes as the team scales.
• Coordinate with Engineering and Product to feed customer feedback into the platform.

Skills

Security operations

On-call readiness

Alerts investigation

XDR/SIEM knowledge

Log telemetry

MITRE ATT&CK

SQL/SIEM queries

Malware analysis

Collaboration

Customer communication

Tools

SPL

KQL

SQL

SIEM

Job description

About 7AI

7AI is the foundational AI security company. Founded in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, we came out of stealth in February 2025 to take on the non-human work of the SOC. Our platform pairs a federated SIEM with AI agents that detect, investigate, respond, and hunt, plus dedicated threat hunting and threat intelligence, with humans on the loop.

Backed by $166 million in total funding from investors including Index Ventures and Blackstone, we're building the AI foundation for security operations in the agentic era, and we're still early. That's the appeal: you'll join at a pivotal stage where your work shapes what 7AI becomes, alongside security veterans who've built this before. Our culture runs on respect, collaboration, and a shared bar for excellence, all pointed at one goal, delivering real outcomes for the customers who trust us to defend them.

Overview

7AI's AI agents take on a lot of the SOC's non-human work, but every agent investigation still needs a human who can verify it, prove the threat was real, and answer for it when a customer asks. As a Security Analyst, you'll be that person: validating and extending the work of 7AI's AI agents, investigating the malicious activity they catch, and hunting for emerging threats in customer environments. You'll work directly with customers, from SOC analysts to CISOs, to triage alerts and resolve incidents, and you'll help shape how this team operates as we grow it.

What You'll Do

• Analyze and validate AI Agent investigations for accuracy, completeness, and risk




• Correlate data across cloud, endpoint, identity, and network sources to build the full picture of an attack




• Investigate the malicious activity 7AI's Agents responded to, and assess the risk it prevented for customers




• Use 7AI's Agents to hunt for emerging threats in customer environments, feeding what you find back into product detections




• Help customers with threat monitoring, triage, and alert prioritization, especially during active incidents




• Review logs and findings to proactively spot threats and anomalies in customer environments




• Communicate with customers across a range of technical backgrounds, from SOC analysts to CISOs




• Help build repeatable processes as we scale this team, without sacrificing quality




• Work with Engineering and Product, sharing customer feedback and helping tune the AI platform




• Stay current on emerging threats, vulnerabilities, and attack techniques, including AI-driven attacks

What We're Looking For

• 2+ years of experience in security operations




• Comfortable with on-call weekend shifts as needed




• Hands-on experience investigating alerts across endpoint, network, identity, email, and cloud sources, including intrusion detection systems and endpoint protection platforms




• Strong understanding of security monitoring tools such as XDR, SIEM, IDS/IPS, and IDP




• Familiarity with log and telemetry concepts




• Working knowledge of common attack techniques and frameworks like MITRE ATT&CK, and incident triage methodologies




• Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions




• Experience querying SIEM data with SPL, KQL, FQL, or SQL




• Familiarity with malware analysis methods




• Strong interpersonal skills with a service-oriented mindset




• A track record of collaborating well in a team

Nice to Have

• Prior experience in a managed services environment




• Incident handling experience




• Relevant certifications: Security+, GSEC, or GCIH