Artemis SOC Manager at Artemis to lead and scale the Artemis Apollo managed detection and response (MDR) service. Set operational standards and quality assurance while working cases alongside the team.
Responsibilities
Lead and scale the MDR operation - Own and evolve the Artemis Apollo SOC, directing shift coverage, staffing ratios, and day-to-day operations as the team and customer base grow.
Set the operating standard - Shape and continuously improve the SOPs, runbooks, escalation paths, and on-call processes that make case review consistent, repeatable, and high-quality across analysts and shifts.
Own quality assurance - Review analyst verdicts and case work, set and enforce the quality bar, and close the loop with coaching so the team's analysis stays accurate and customer-ready.
Carry a caseload as a player-coach - Work and escalate real cases yourself, especially early and during peak load, leading from the front rather than only managing from above.
Own SLAs and service delivery - Define, commit to, and hit response-time targets by severity, and manage the queue so the most important cases are worked first.
Lead incident response and escalations - Run point when a case becomes a declared incident: coordinate containment, drive the MDR-to-IR handoff, and guide customer leadership and their IR partners through it.
Hire, onboard, and mentor analysts - Grow the team: recruit mid-to-senior analysts, run onboarding and training, and develop strong analysts at every level without lowering the bar.
Be a trusted security voice for customers - Serve as a senior security point of contact alongside the broader team: present findings and outcomes, handle escalations, and communicate clearly, meeting customers where they are.
Shape and improve the product - You'll have both the ability and the responsibility to influence the Artemis platform: turn patterns from case review into detection tuning, product requirements, and response automation, so recurring noise gets fixed at the source and the product gets better with every case.
Manage the metrics that matter - Track must-review load, mean-time-to-verdict, analyst-vs-system agreement, and SLA attainment, and use them to right-size staffing and prove out the operation.
Qualification
Strong knowledge of attacker tacticsTrack record hiringExcellent communication skillsWhy Work at Artemis?
Required
7+ years of hands-on cybersecurity experience, including team leadership in a SOC, MSSP, or MDR environment
Proven experience building or running a SOC / MDR operation, standing up SOPs, runbooks, shift coverage, and SLA programs
Hands-on incident response experience across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS environments
Strong knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and the ability to QA and elevate analyst investigations
Track record hiring, mentoring, and retaining tier-2/3 analysts while holding a high quality bar
Excellent communication skills, comfortable owning customer relationships and incident calls with both technical and executive audiences
Experience standing up or scaling a SOC or MDR service
Familiarity with a wide range of security tools (SIEM, EDR, SOAR) and detection content (Sigma, YARA-L, SPL, KQL)
Experience with compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF) and audit-ready reporting
Customer-facing experience in an MDR or managed-services context
Experience with AI-assisted investigation or automation tooling
