SOC Manager

Job description

Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield. We're backed by First Round Capital, Brightmind, and a group of the cybersecurity industry's most prominent Operators. Our founders, Shachar (ex-Palo Alto Networks, AWS, Demisto) and Dan (ex-Abnormal Security, Twitter) have previously built, launched, and scaled cybersecurity products loved and trusted by tens of thousands of customers, and have the customer, technology, and security know-hows to deliver this vision. Our exceptionally strong team includes software engineers, AI researchers, security engineers, and product designers hailing from Google, Abnormal AI, Wiz, Meta, AWS, CERN, SentinelOne, and more. We are growing our team and looking for passionate builders to join us and support our expanding customer base. Job Overview We're looking for a SOC Manager to lead and scale Artemis Apollo, our managed detection and response (MDR) service. Apollo is already live: our AI-native platform investigates and resolves cases for customers today, and a security team works them. This is a player-coach leadership role — you'll set the direction for how the SOC operates as we scale, sharpening the standard operating procedures, escalation paths, and quality bar, while still working real cases alongside your team. You'll own how we deliver security outcomes to customers: the SLAs we commit to, the consistency and quality of every verdict, and the human expertise and communication that set Apollo apart from a traditional SOC. Responsibilities - Lead and scale the MDR operation - Own and evolve the Artemis Apollo SOC, directing shift coverage, staffing ratios, and day-to-day operations as the team and customer base grow. - Set the operating standard - Shape and continuously improve the SOPs, runbooks, escalation paths, and on-call processes that make case review consistent, repeatable, and high-quality across analysts and shifts. - Own quality assurance - Review analyst verdicts and case work, set and enforce the quality bar, and close the loop with coaching so the team's analysis stays accurate and customer-ready. - Carry a caseload as a player-coach - Work and escalate real cases yourself, especially early and during peak load, leading from the front rather than only managing from above. - Own SLAs and service delivery - Define, commit to, and hit response-time targets by severity, and manage the queue so the most important cases are worked first. - Lead incident response and escalations - Run point when a case becomes a declared incident: coordinate containment, drive the MDR-to-IR handoff, and guide customer leadership and their IR partners through it. - Hire, onboard, and mentor analysts - Grow the team: recruit mid-to-senior analysts, run onboarding and training, and develop strong analysts at every level without lowering the bar. - Be a trusted security voice for customers - Serve as a senior security point of contact alongside the broader team: present findings and outcomes, handle escalations, and communicate clearly, meeting customers where they are. - Shape and improve the product - You'll have both the ability and the responsibility to influence the Artemis platform: turn patterns from case review into detection tuning, product requirements, and response automation, so recurring noise gets fixed at the source and the product gets better with every case. - Manage the metrics that matter - Track must-review load, mean-time-to-verdict, analyst-vs-system agreement, and SLA attainment, and use them to right-size staffing and prove out the operation. Qualifications - 7+ years of hands-on cybersecurity experience, including team leadership in a SOC, MSSP, or MDR environment - Proven experience building or running a SOC / MDR operation, standing up SOPs, runbooks, shift coverage, and SLA programs - Hands-on incident response experience across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS environments - Strong knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and the ability to QA and elevate analyst investigations - Track record hiring, mentoring, and retaining tier-2/3 analysts while holding a high quality bar - Excellent communication skills, comfortable owning customer relationships and incident calls with both technical and executive audiences Bonus - Experience standing up or scaling a SOC or MDR service - Familiarity with a wide range of security tools (SIEM, EDR, SOAR) and detection content (Sigma, YARA-L, SPL, KQL) - Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF) and audit-ready reporting - Customer-facing experience in an MDR or managed-services context - Experience with AI-assisted investigation or automation tooling Why Work at Artemis? - Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on. - Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place. - Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like. - Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook. If you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you. Compensation We offer a competitive compensation of $160,000-$200,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed. Equal Opportunity At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.