Skip to main content

Artemis

Detection Engineer

Remote (Remote)$100k–$160kfulltimemidAdded 2 days ago

About this role

Own the detection content powering the Artemis security platform by designing, building, and tuning high-fidelity detections across cloud, identity, endpoint, and SaaS environments. Apply detection-as-code principles and leverage AI to author and validate rules at scale, ensuring precision and rich context for an AI-native investigation pipeline.

What you'll do

  • Design and implement high-fidelity detections across cloud (AWS, Azure, GCP), identity, endpoint, and SaaS sources using detection-as-code practices with version control and CI/CD
  • Map detection coverage gaps against MITRE ATT&CK and systematically close them based on real-world threat activity
  • Build attack simulations and test harnesses to validate detections against true positives and benign activity before deployment
  • Analyze and tune detection performance data to reduce false positives and false negatives across the customer fleet
  • Use AI-assisted workflows to author, convert, test, and document detection rules faster while ensuring quality
  • Engineer behavioral and anomaly-based detections that establish baselines and flag deviations with high signal and low noise

What they're looking for

  • Detection engineering with hands-on experience in SIEM, EDR, or custom detection platforms
  • Proficiency in detection languages: Sigma, KQL, SPL, YARA-L, and Python for automation and testing
  • Deep knowledge of MITRE ATT&CK framework and how attack techniques manifest across cloud, identity, endpoint, and SaaS logs
  • Detection-as-code workflows including Git, peer review, automated testing, and CI/CD practices
  • AI tool experience for detection authoring, tuning, and validation with judgment on production readiness
  • Behavioral and anomaly detection engineering including baseline establishment and deviation flagging
  • Log analysis and ability to distinguish malicious activity from benign noise across diverse data sources
  • Clear written and verbal communication for documenting logic and explaining coverage to technical and non-technical stakeholders
Apply with Autofill

Opens the application — the Jobs AI extension fills it for you. Set up autofill

Opens the official application on the employer’s site. No login required.

Artemis

Artemis builds an AI-driven cybersecurity platform that detects and defends against modern threats using large-scale LLM systems and intelligent threat detection. The company is hiring product engineers, security researchers, and ML engineers to develop full-stack customer-facing features, AI-powered security detections, and scalable infrastructure for processing security data.

View all jobs at Artemis

Likely interview questions

  • Walk us through your experience designing detections at scale—what platforms have you used and how did you measure their effectiveness?
  • Describe your process for reducing false positives in a detection while maintaining coverage. How do you balance signal and noise?
Unlock all 7 questions free — and practice them live →