MDR Lead (Israel)

The role

You will launch the MDR service in Israel and stand up the regional SOC operating model. You will act as a senior hands-on operator running investigations and tuning detections while growing and leading an analyst team.

What you will do

• Launch the MDR service in Israel including scope, coverage model, escalation paths, and customer-facing SLAs
• Stand up the regional SOC operating model including shift coverage, triage procedures, and case management
• Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS
• Lead investigations and incident response for customer-facing detections
• Own the hardest cases end to end
• Define metrics such as time to detect, time to triage, false positive rate, and customer impact
• Hire, onboard, and grow the MDR analyst team
• Feed findings from investigations back to detection engineering and product
• Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews
• Set on-call and coverage policies

Required qualifications

• 5+ years in security operations, incident response, or detection and response
• At least 2 years leading or senior-owning a SOC or MDR function
• Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs
• Track record of launching or significantly scaling a SOC or MDR service
• Strong understanding of MITRE ATT&CK
• Experience with SIEM, EDR/XDR, and SOAR platforms
• Comfort with query languages such as KQL, SPL, or SQL
• Clear communicator who can brief customers and executives during active incidents
• Comfortable making decisions with incomplete information and owning the outcome
• Fluent in English

Nice to have

• Hebrew is a plus
• Prior experience at an MDR provider or a managed security services team
• Experience selling into or supporting enterprise customers during security escalations
• Background in detection engineering or threat hunting
• Experience building runbooks or automation that reduced analyst workload
• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent

About the company

Artemis is building the future of AI-driven cybersecurity. The company is building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats.