Senior Security Analyst — AI-Driven Defense

Artemis Security; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Artemis is seeking a Senior Security Analyst to join Apollo, our managed detection and response service. You will lead investigations across cloud, identity, endpoint, and SaaS, guiding customers through what matters and why, and carrying incidents from signal to resolution.

You will work across environments, build fluency in attacker tradecraft, and collaborate with engineers to ship insights back into the product, strengthening every customer defense in real time.

Qualifications

• 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR.
• Proven investigation depth across identity, cloud, endpoint, and SaaS.
• Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and real telemetry.
• Rigor about evidence and determining what is truly suspicious vs. confirmed.
• Hands-on experience with AI-assisted investigation or automation.

Responsibilities

• Own investigations from start to finish; determine impact, blast radius, and verdict.
• Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry.
• Recommend and execute containment with customer-approved actions.
• Move quickly according to threat severity and keep high-priority work moving.
• Communicate clearly with customers through written and spoken updates.
• Hunt for threats using hypothesis-driven and AI-assisted methods.
• Help design and evolve the Apollo service, detection workflows, and reporting.
• Contribute to platform improvements by sharing findings with engineering.

Skills

Security operations

Investigation depth

MITRE ATT&CK

Evidence discipline

AI-assisted investigation

Customer-facing

Written communication

24x7 shift readiness

Tools

Okta

Entra ID

AWS

Azure

GCP

EDR

Microsoft 365

Google Workspace

Job description

Artemis is seeking a Senior Security Analyst to join Apollo, our managed detection and response service. You will lead investigations across cloud, identity, endpoint, and SaaS, guiding customers through what matters and why, and carrying incidents from signal to resolution.

You will work across environments, build fluency in attacker tradecraft, and collaborate with engineers to ship insights back into the product, strengthening every customer defense in real time.