Skip to content

Open nowPosted 22 hours ago

MDR Lead (Israel)

Artemis24 open roles

Where
Israel
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowMDR Lead (Israel)Artemis · Israel
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Artemis's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Artemis postings stay open a median of 18 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 22 hours ago

Artemis median: 18 days open

The posting

About Artemis

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

Artemis’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.

We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.

The Role

We're hiring our first MDR Lead to launch Artemis's managed detection and response function in Israel (Apollo). This is a foundational role.

You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. You will grow the team - hire, coach, and lead analysts, and set the standards they work to. You’ll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.

Responsibilities

- Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs

- Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management

- Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS

- Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end

- Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact

- Hire, onboard, and grow the MDR analyst team as demand scales

- Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source

- Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews

- Set on-call and coverage policies that are sustainable for the team

Qualifications

- 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function

- Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs

- Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure

- Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment

- Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL

- Clear communicator who can brief customers and executives during active incidents

- Comfortable making decisions with incomplete information and owning the outcome

- Fluent in English (Hebrew is a plus)

Nice to Have

- Prior experience at an MDR provider or a managed security services team

- Experience selling into or supporting enterprise customers during security escalations

- Background in detection engineering or threat hunting

- Experience building runbooks or automation that reduced analyst workload

- Relevant certifications such as GCIH, GCIA, OSCP, or equivalent

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Artemis's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Artemis's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Artemis's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.