Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.

We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.

Job Overview

We're looking for a SOC Manager to lead and scale Artemis Apollo, our managed detection and response (MDR) service. Apollo is already live: our AI-native platform investigates and resolves cases for customers today, and a security team works them. This is a player-coach leadership role — you'll set the direction for how the SOC operates as we scale, sharpening the standard operating procedures, escalation paths, and quality bar, while still working real cases alongside your team. You'll own how we deliver security outcomes to customers: the SLAs we commit to, the consistency and quality of every verdict, and the human expertise and communication that set Apollo apart from a traditional SOC.

Responsibilities

Lead and scale the MDR operation - Own and evolve the Artemis Apollo SOC, directing shift coverage, staffing ratios, and day-to-day operations as the team and customer base grow.

Set the operating standard - Shape and continuously improve the SOPs, runbooks, escalation paths, and on-call processes that make case review consistent, repeatable, and high-quality across analysts and shifts.

Own quality assurance - Review analyst verdicts and case work, set and enforce the quality bar, and close the loop with coaching so the team's analysis stays accurate and customer-ready.

Carry a caseload as a player-coach - Work and escalate real cases yourself, especially early and during peak load, leading from the front rather than only managing from above.

Own SLAs and service delivery - Define, commit to, and hit response-time targets by severity, and manage the queue so the most important cases are worked first.

Lead incident response and escalations - Run point when a case becomes a declared incident: coordinate containment, drive the MDR-to-IR handoff, and guide customer leadership and their IR partners through it.

Hire, onboard, and mentor analysts - Grow the team: recruit mid-to-senior analysts, run onboarding and training, and develop strong analysts at every level without lowering the bar.

Be a trusted security voice for customers - Serve as a senior security point of contact alongside the broader team: present findings and outcomes, handle escalations, and communicate clearly, meeting customers where they are.