Senior Security Analyst, MDR

Artemis

. Join Apollo, Artemis's managed detection and response service, as one of its founding analysts .

Posted 10/12/2026full-timeRemote • AustraliaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations, particularly in SOC, MSSP, or MDR environments, with a strong focus on investigation depth across identity, cloud, endpoint, and SaaS platforms. Proficient in AI-assisted investigations and effective communication of security findings to customers.

Highest-signal resume keywords

Security Operations ExperienceInvestigation Depth Across Identity PlatformsFluency In MITRE ATT&CKCustomer-Facing ExperienceHands-On Experience With AI-Assisted Investigation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Investigation Depth Across Identity PlatformsInvestigation Depth Across Cloud PlatformsInvestigation Depth Across Endpoint Detection And ResponseInvestigation Depth Across SaaS PlatformsEvidence-Based Investigative JudgmentThreat HuntingIncident Command ExperienceDetection Rule WritingAutomationAI-Assisted Investigation

Soft Skills

Excellent Written CommunicationCustomer Communication

Tools & Technologies

OktaEntra IDAWSAzureGCPMicrosoft 365Google WorkspaceSigmaYARA-LSPL

Industry Keywords

SOCMSSPMDRDFIRMulti-Tenant Environment

Tech Stack

Tools & technologies

ApolloAWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Join Apollo, Artemis's managed detection and response service, as one of its founding analysts
Take security cases from pickup to close
Establish what happened, determine impact and blast radius, set verdict and severity, and document reasoning
Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry
Investigate initial access, lateral movement, persistence, and exfiltration
Combine AI-assisted investigation with hands-on log analysis
Recommend and execute containment within each customer's authorized limits
Preview and assess the impact of response actions before execution, keeping actions reversible
Present customers with recommended actions, full impact, and clear next steps when customer approval is required
Acknowledge cases and reach verdicts within response targets according to severity
Prioritize consequential work based on risk
Communicate case summaries, reasoning, and final analysis directly to customers
Run hypothesis-driven and AI-assisted threat hunts across customer environments
Turn threat-hunting findings into new cases and detections
Help design investigative standards, response workflows, customer reporting, and the analyst console
Feed verdicts, reasoning, and recognized patterns into detection engineering and product improvements

Requirements

What you’ll need

4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment
Senior or Tier 3 level experience where investigations ended with the candidate's decision
Proven investigation depth across identity platforms: Okta and Entra ID
Proven investigation depth across cloud platforms: AWS, Azure, and GCP
Proven investigation depth across endpoint detection and response (EDR)
Proven investigation depth across SaaS platforms: Microsoft 365 and Google Workspace
Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK)
Strong evidence-based investigative judgment
Hands-on experience with AI-assisted investigation or automation
Customer-facing experience explaining live security situations and recommended actions
Excellent written communication
Comfortable working a defined shift as analyst coverage expands to 24x7
Bonus: experience in a multi-tenant MDR or MSSP practice
Bonus: experience writing or tuning detection rules using Sigma, YARA-L, SPL, KQL, or similar
Bonus: incident command experience, including customer executive briefings
Bonus: dedicated threat hunting or DFIR background
Bonus: daily hands-on use of AI or agentic coding tools to build personal tooling

Benefits

Comp & perks

Autonomy to drive investigations, shape the platform, and own outcomes
Open communication, mentorship and learning
Opportunity to shape the service, investigative standards, response workflows, customer reporting, and analyst console as a founding analyst
Exposure to a broad range of cloud, identity, endpoint, SaaS environments, and attacker behavior
Opportunity to work with AI-native cybersecurity technology
Opportunity to learn and develop rapidly
Impactful work protecting real companies and their employees
Innovative culture focused on customers, speed, quality, mentorship, and learning