Artemis - Cyber Threat Intelligence Researcher

• Conduct original threat research – Investigate emerging campaigns, attacker infrastructure, exploitation techniques, and changes in adversary tradecraft across cloud, identity, endpoint, SaaS, AI, and data environments. Combine external reporting with authorized telemetry analysis to develop findings grounded in evidence. • Conduct original threat research • Drive managed threat intelligence strategy – Own the research roadmap and intelligence priorities for Artemis’s managed offering. Define the threats and questions that matter to customers, evaluate intelligence sources and partners, and establish how intelligence is collected, assessed, delivered, and kept current. • Drive managed threat intelligence strategy • Publish research and blogs – Write original technical blogs, campaign analyses, threat advisories, and research reports that establish Artemis as a trusted source of security insight. Explain attack behavior, supporting evidence, defensive implications, and practical hunting guidance for technical and executive audiences. • Publish research and blogs • Build and execute threat hunts – Translate novel threats and research hypotheses into hunts across customer environments. Identify relevant telemetry, develop queries and behavioral correlations, investigate results, and turn successful approaches into reusable hunt templates with clear prerequisites and limitations. • Build and execute threat hunts • Track actors and campaigns – Connect infrastructure, tooling, victimology, and observed behaviors across investigations. Maintain useful campaign and activity-cluster assessments, clearly separating observed facts, analytical judgments, confidence levels, and attribution uncertainty. • Track actors and campaigns • Operationalize intelligence – Partner with detection engineers and the SOC to turn research into detections, investigation guidance, enrichment, and response recommendations. Manage the quality and lifecycle of indicators and intelligence content, including provenance, relevance, confidence, and expiration. • Operationalize intelligence • Research threats involving AI – Investigate how attackers use AI and how they target AI applications, agents, tools, and connected data. Develop practical hypotheses and hunts for emerging abuse, distinguishing demonstrated activity from speculation and identifying where additional telemetry is needed. • Research threats involving AI • Build research automation – Use Python, APIs, and AI-assisted workflows to accelerate collection, enrichment, correlation, and analysis. Verify sources and conclusions independently, preserve evidence, and build repeatable workflows that scale research without sacrificing analytical quality. • Build research automation • Deliver actionable customer intelligence – Brief customers and internal teams on relevant developments, explain exposure and observed activity, and recommend concrete next steps. Measure impact through useful hunts, coverage improvements, and customer decisions, and use feedback to refine the intelligence program. • Deliver actionable customer intelligence