---
title: 'Offensive Security Engineer at Artemis'
canonical: 'https://feeny.ai/job/offensive-security-engineer-artemis-new-york-7zrpwcnp1r13'
type: 'job'
last_seen: '2026-10-17'
---

# Offensive Security Engineer at Artemis

- **Company:** Artemis
- **Location:** New York, NY
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-10-11
- **Last confirmed live:** 2026-10-17
- **Apply:** https://jobs.ashbyhq.com/artemis/eacc8a16-ff50-407f-8a92-aa56aeef177a

## Job description

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.

We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base.

## Responsibilities

- Build scalable adversary emulation – Develop reusable scenarios and automation that reproduce attacker behaviors and multi-stage attack chains across cloud, identity, endpoint, SaaS, AI, and data environments. Prioritize work using threat intelligence, customer risk, and detection coverage gaps.
- Validate detections end to end – Trace emulated activity through collection, normalization, enrichment, detection, and investigation. Verify expected findings and evidence, identify missed detections and visibility gaps, and distinguish successful prevention from successful detection.
- Research attacks against AI systems – Investigate prompt injection, MCP and tool abuse, retrieval poisoning, excessive agent privileges, and unauthorized actions. Chain weaknesses across applications, agents, and integrations to establish realistic impact and identify detection opportunities.
- Research attacks against data planes – Explore abuse of service identities, integration tokens, permissions, and data access across databases, warehouses, object storage, and AI retrieval systems. Turn access, staging, export, and cross-platform attack paths into repeatable scenarios.
- Reproduce emerging exploits – Assess relevant vulnerability disclosures and exploit research in isolated labs. Establish prerequisites, practical impact, and observable behavior, then translate findings into detection hypotheses and bounded emulations.
- Enable safe testing in customer environments – Build authorized emulations and control checks with clear scope, preflight checks, least-privilege access, execution limits, stop controls, and verified cleanup. Document prerequisites, expected effects, and which scenarios require an isolated lab.
- Build continuous validation – Integrate scenarios with detector tests and engineering workflows. Develop AI evaluation harnesses with attack variations, multi-turn tests, and benign controls, measuring outcomes as models, tools, permissions, and detections change.
- Turn research into defensive improvements – Contribute detections, hunt logic, telemetry requirements, and regression tests. Partner with engineering and customer owners to drive findings through remediation and retesting, verifying fixes against malicious and benign behavior.
- Partner with the SOC and customers – Run purple-team exercises, explain findings and limitations, and give analysts the evidence and guidance needed to investigate emulated behaviors. Use AI to accelerate research and tooling while independently verifying generated actions and conclusions.

## Qualifications

- 5+ years of hands-on cybersecurity experience, with substantial offensive security, red teaming, adversary emulation, or security research work; equivalent demonstrated expertise is welcome.
- Strong Python skills and a track record building reusable security tools with APIs, SDKs, Git, code review, and automated testing.
- Deep practical expertise in at least one cloud or identity ecosystem, with an understanding of permissions, service identities, sessions, and data access.
- Practical web/API security knowledge and experience chaining weaknesses across authorization boundaries into meaningful attack paths.
- Experience reproducing attacks in controlled environments and connecting the resulting behavior to audit logs, detection logic, and investigation evidence.
- Experience assessing AI applications or agent workflows, or demonstrated offensive research into these systems.
- Sound judgment in sensitive environments: define scope, anticipate side effects, limit impact, protect data, and verify cleanup.
- Clear communication and the ability to own work from research through implementation, operational use, and verified outcomes.

Bonus

- Experience with Atomic Red Team, MITRE ATT&CK and ATLAS, purple teaming, or continuous security validation.
- Experience with SQL, detection-as-code, and cloud, identity, SaaS, or endpoint telemetry.
- Hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations.
- Experience assessing data warehouses, object storage, Kubernetes, CI/CD systems, or software supply chains.
- Contributions to offensive tooling, emulation frameworks, detection content, or published security research.
- Experience building isolated labs and enabling customers to operate security tooling.

Why Work at Artemis?

- Make a real-world impact. Your tools and research will directly improve how real companies detect and defend against emerging threats.
- Build at the intersection of AI and security. Work with security and AI engineers to test emerging attack surfaces and turn discoveries into practical defenses.
- Own what you build. Take ideas from research to working capabilities used across the platform and customer environments.
- Work closely with practitioners. Partner with detection engineers, researchers, and analysts who can put your work into use and help measure its impact.

## Compensation

We offer a competitive compensation of $180,000 – $220,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate’s professional experience. Final offer amounts may vary from the amounts listed.

## About Artemis

## Company Overview
- **One-liner**: Artemis is building an AI-native protection platform that helps security teams detect, investigate, and respond to modern cyber threats by replacing traditional SIEMs with agentic, environment-aware detection.
- **Entity Type**: Private (Series A)
- **Headquarters**: New York, New York, United States
- **Founded**: 2025
- **Founders**: Shachar Hirshberg (CEO) and Dan Shiebler (CTO)

## Core Business
- Primary industry: Cybersecurity (AI-Native Security Operations)
- Target customers: Enterprise security teams (SOC, detection engineering, threat hunting)
- Mission or purpose: Reinventing how companies defend themselves in the AI era by delivering precise, adaptive, and cost-effective threat detection and response.

## Products & Services
- **[Artemis AI-Native Protection Platform]**: A SaaS platform that continuously analyzes a customer’s technical and business environment to autonomously create, tune, and maintain detections. It correlates identity, cloud, endpoint, network, and SaaS telemetry into complete attack narratives. Features include AI agents for autonomous investigation, natural-language querying, federated telemetry (reducing ingest costs), automated threat intelligence mapping (MITRE ATT&CK), and incident response playbooks.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total Funding of $70M (Series A of $50M and Seed of $20M, both closed in April 2026)
- **Notable Investors/Partners**: Felicis, First Round Capital, Brightmind, Theory VC, Lockstep, Two Sigma Ventures, plus a group of prominent cybersecurity operators
- **Growth Signals**: The company has grown to 22 employees in under two years (founded 2025), with a monthly headcount growth of +11.8%. It reports a 96% reduction in mean time to resolution for customers and a “2 weeks to coverage” deployment timeline. The company is actively hiring across engineering, GTM, and security roles (12 open positions as of mid-2026).

## Competitive Advantages
- **AI-Native Architecture**: Built from the ground up with AI agents that reason, adapt, and act—not a chatbot bolted onto a legacy SIEM. This allows for autonomous detection writing, investigation, and response.
- **Federated Telemetry**: Streams only detection-critical logs and retrieves the rest on demand, dramatically reducing data ingestion costs while maintaining full visibility.
- **Environment Intelligence**: Continuously builds a living model of assets, users, configurations, and business context, enabling detections that adapt to the specific environment rather than relying on generic rules.
- **Founding Team Depth**: CEO Shachar Hirshberg led product for Amazon GuardDuty and was an early employee at Demisto; CTO Dan Shiebler led AI/ML at Abnormal Security and built ML systems at Twitter.

## Strategic Focus
- Current priorities include expanding the enterprise customer base, deepening AI agent capabilities across the full security lifecycle (detection, investigation, response, containment), and scaling the go-to-market team (hiring for enterprise sales, partnerships, and product marketing).
- The company is also focused on closing the gap between traditional SIEMs and the speed of AI-driven threats, with a clear emphasis on replacing legacy detection workflows.

## Why Work Here
- **Culture & Mission**: Mission-driven work at the intersection of AI and cybersecurity, with a focus on building “AI that defends modern systems.” The team includes alumni from Amazon, Abnormal Security, Two Sigma, and Lockheed Martin.
- **Work Policy**: Most roles are based in New York City (HQ), with some remote positions (e.g., Senior Software Engineer, Infrastructure).
- **Benefits**: Top-of-market salary and equity in an early-stage company; comprehensive health, dental, and vision insurance; 401k plan; daily team meals (breakfast, lunch, dinner); $200/month commute reimbursement; $300/month wellness stipend.
- **Engineering Culture**: AI-first development approach—teams design systems where AI agents reason and act autonomously, rather than relying on handcrafted rules. Tech stack includes TypeScript, Python, React, ClickHouse, Snowflake, Terraform, and more.
- **Growth**: Early-stage company with significant growth potential and a fast-paced, high-impact environment.

## Sources
1. [artemissecurity.com](https://artemissecurity.com/) – Product and company overview
2. [artemissecurity.com/about](https://artemissecurity.com/about/) – Founders and mission
3. [artemissecurity.com/careers](https://artemissecurity.com/careers/) – Open roles and benefits
4. [linkedin.com/company/goartemis](https://www.linkedin.com/company/goartemis) – LinkedIn profile, funding, employee data
5. [getclera.com](https://www.getclera.com/companies/artemis-ai) – Company intelligence and tech stack

## Other roles at Artemis

- [Senior Security Analyst (MDR-US/NYC)](https://feeny.ai/job/senior-security-analyst-mdr-us-nyc-artemis-new-york-hccdcxwr74vp) — New York, NY
- [Senior Security Analyst (MDR-Israel)](https://feeny.ai/job/senior-security-analyst-mdr-israel-artemis-israel-djqdn37ve18q) — Israel
- [Senior Security Analyst (MDR-Australia)](https://feeny.ai/job/senior-security-analyst-mdr-australia-artemis-australia-w7zpahqkqmjq) — Australia
- [Sales Development Representative (UK)](https://feeny.ai/job/sales-development-representative-uk-artemis-london-9j3wbbb1m6j0) — London, United Kingdom
- [Channel Sales Manager](https://feeny.ai/job/channel-sales-manager-artemis-london-hvn9mg7v9aj2) — London, United Kingdom
- [Technology Alliances Manager](https://feeny.ai/job/technology-alliances-manager-artemis-remote-vb4bkcq9nvwe)
- [Senior Recruiter](https://feeny.ai/job/senior-recruiter-artemis-new-york-5v4j4n4x8hdt) — New York, NY
- [Senior Account Executive (Enterprise)](https://feeny.ai/job/senior-account-executive-enterprise-artemis-remote-e634bg6hzzt1)
- [SOC Manager](https://feeny.ai/job/soc-manager-artemis-new-york-pchrty2c6kke) — New York, NY
- [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-artemis-new-york-nwfztmnmgyyq) — New York, NY