Security Research Engineer

Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Job Overview

We're looking for a Security Research Engineer to drive detection research, threat hunting, and AI-powered security automation. You'll work at the intersection of security expertise and cutting-edge AI—researching data sources, building detections, investigating real incidents, and engaging directly with customers to deliver security value. This is a hands-on, high-impact role where your work directly shapes what threats we catch and how we catch them.

Responsibilities

• Develop AI-powered detection tooling - Build automation that leverages AI to accelerate detection creation, tuning, and validation at scale.
• Conduct security research - Analyze cloud, identity, and SaaS data sources (AWS CloudTrail, Okta, Entra ID, and more) to extract security value and identify detection opportunities.
• Perform attack simulations - Execute authorized attack simulations to validate detection coverage and identify gaps in our defenses.
• Hunt for threats - Proactively search for malicious activity across customer environments using our platform and tooling.
• Investigate potential cases - Analyze security incidents to demonstrate product value, refine detection logic, and deliver actionable findings.
• Engage with customers - Join customer calls to present analysis results, walk through findings, and gather feedback that shapes the product.
• Tune customer detections - Reduce false positives and improve detection accuracy based on real-world data and customer context.
• Build investigation automation - Create AI-powered tools that scale investigation and threat hunting workflows across our platform.

Qualifications

• 7+ years of hands-on cybersecurity experience
• Hands-on experience in incident response including cloud environments (AWS, Azure, GCP) and identity providers (Okta, Entra ID)
• Strong knowledge of threat actor tactics, techniques, & procedures and demonstrated understanding uncovering threat actor activity in various environments
• Strong experience with log-based analysis and demonstrated ability to identify malicious activity across a variety of log sources
• Ability to translate security research into actionable detections or threat hunt investigations
• Strong communication skills—comfortable explaining technical findings to engineers and customers
• Experience with detection engineering at scale
• Bonus:
• Background working in a SOC environment or Managed Detection and Response.
• Familiarity with a wide range of security tools (SIEM, EDR, SOAR)
• Customer-facing technical experience
• Experience with AI tools and models

Why Work at Artemis?

• Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.
• Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.
• Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity, including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.
• Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorshi,p and learning. You will have autonomy to drive projects and support to grow.If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.

If you are passionate about cybersecurity and want to apply your expertise to build AI-powered defenses against advanced threats, we'd love to hear from you.

Compensation
We offer a competitive compensation of 180,000$- 220,000$ per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.