Refolk
Open nowEngineeringEngineering

Security Research Engineer

Artemis Security · New York City, New York

Location
New York City, New York, United States
Workplace
Remote
Employment
Full time
Level
Mid level
Posted
11 October

About this role

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.

We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.

Job Overview

We're looking for a Security Research Engineer to drive detection research, threat hunting, and AI-powered security automation. You'll work at the intersection of security expertise and cutting-edge AI - researching data sources, building detections, investigating real incidents, and engaging directly with customers to deliver security value. This is a hands-on, high-impact role where your work directly shapes what threats we catch and how we catch them.

Responsibilities

  • Develop AI-powered detection tooling - Build automation that leverages AI to accelerate detection creation, tuning, and validation at scale.

  • Conduct security research - Analyze cloud, identity, and SaaS data sources (AWS CloudTrail, Okta, Entra ID, and more) to extract security value and identify detection opportunities.

  • Perform attack simulations - Execute authorized attack simulations to validate detection coverage and identify gaps in our defenses.

  • Hunt for threats - Proactively search for malicious activity across customer environments using our platform and tooling.

  • Investigate potential cases - Analyze security incidents to demonstrate product value, refine detection logic, and deliver actionable findings.

  • Engage with customers - Join customer calls to present analysis results, walk through findings, and gather feedback that shapes the product.

  • Tune customer detections - Reduce false positives and improve detection accuracy based on real-world data and customer context.

  • Build investigation automation - Create AI-powered tools that scale investigation and threat hunting workflows across our platform.

Qualifications

  • 7+ years of hands-on cybersecurity experience

  • Hands-on experience in incident response including cloud environments (AWS, Azure, GCP) and identity providers (Okta, Entra ID)

  • Strong knowledge of threat actor tactics, techniques, & procedures and demonstrated understanding uncovering threat actor activity in various environments

  • Strong experience with log-based analysis and demonstrated ability to identify malicious activity across a variety of log sources

  • Ability to translate security research into actionable detections or threat hunt investigations

  • Strong communication skills - comfortable explaining technical findings to engineers and customers

  • Experience with detection engineering at scale

  • Bonus:

    • Background working in a SOC environment or Managed Detection and Response.

    • Familiarity with a wide range of security tools (SIEM, EDR, SOAR)

    • Customer-facing technical experience

    • Experience with AI tools and models

    Why Work at Artemis?

    • Make a real world impact. Help empower cybersecurity teams around the world to keep people safe from the most advanced cyber threats.

    • Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place.

    • Push the boundaries of technology. Work with and build the most advanced AI capabilities in the world of cybersecurity, including cutting-edge analytics and agentic platforms. Your ideas will shape the product and the industry.

    • Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorshi,p and learning. You will have autonomy to drive projects and support to grow.If you are passionate about building resilient distributed systems and want to apply your expertise to defend against AI‑powered adversaries, we’d love to hear from you.

      If you are passionate about cybersecurity and want to apply your expertise to build AI-powered defenses against advanced threats, we'd love to hear from you.

    Compensation
    We offer a competitive compensation of 180,000$- 220,000$ per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.

    Equal Opportunity
    At Artemis, we believe the best ideas come from diverse teams. We’re committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.

    As published by Artemis Security. Applications are handled on their site.

    Skills this posting mentions

    Incident ResponseMachine LearningOkta

    About Artemis Security

    Artemis is building the future of AI-driven defense - helping companies detect and defend themselves effectively in an era where AI is fighting AI on the cyber battlefield. As an AI-native Protection Platform, Artemis reliably detects and contains important threats with actionable context. By streaming only detection-critical logs and retrieving the rest on demand in a federated manner, it reduces cost while ensuring full visibility. Because it agentically and continuously adapts to changes in your environment and the threat intelligence landscape, your detection coverage never falls behind - delivering stronger protection. We’re backed by Felicis, First Round Capital, Brightmind, Theory VC, Lockstep, Two Sigma Ventures, and a group of the cybersecurity industry’s most prominent operators.

    All 22 openings at Artemis Security

    One click, then it is written

    Apply to Artemis Security with a resume written for this role.

    Queue Security Research Engineer and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Artemis Security’s form for you.

    1. 01Drop your resume

      A PDF or a LinkedIn URL. About a minute, once.

    2. 02I rank the openings

      Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

    3. 03Each one is written up

      Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

    • 25 sent a week, free
    • No card
    • Nothing sent until you say so

    More roles at Artemis Security

    See all

    Similar roles elsewhere

    See more

    Put this to work

    Paste your career in once. Every application after that is written for you.

    Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

    1. 01Drop your resume

      A PDF or a LinkedIn URL. About a minute, once.

    2. 02I rank the openings

      Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

    3. 03Each one is written up

      Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

    • New matches ranked and written before you are up.
    • Every bullet stays inside what your history supports. Nothing invented.
    • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

    Free, no card. Up to 25 applications sent a week, and nothing is sent until you say so.

    Listed from the job board Artemis Security publishes. Refolk is not the employer and does not handle their hiring. Applications go to Artemis Security directly.

    Hiring at Artemis Security? Post this role to the Refolk talent pool for $299, once. No commission, refunded if I find nobody. Post a role for $299