Artemis - MDR Lead (Israel)
Requirements
• 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function • Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs • Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure • Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment • Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL • Clear communicator who can brief customers and executives during active incidents • Comfortable making decisions with incomplete information and owning the outcome • Fluent in English (Hebrew is a plus) • Prior experience at an MDR provider or a managed security services team • Experience selling into or supporting enterprise customers during security escalations • Background in detection engineering or threat hunting • Experience building runbooks or automation that reduced analyst workload • Relevant certifications such as GCIH, GCIA, OSCP, or equivalent
Responsibilities
• Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs • Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management • Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS • Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end • Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact • Hire, onboard, and grow the MDR analyst team as demand scales • Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source • Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews • Set on-call and coverage policies that are sustainable for the team
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT