MDR Lead (Israel)

About the company

The company is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield.

Our platform brings a new approach to the $100B security operations market, building a live model of each customer’s environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, the company is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor.

We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto.

The company’s founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world’s largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford.

Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more.

We’re growing fast and looking for builders who want to help us serve our rapidly expanding customer base.

The Role

We're hiring our first MDR Lead to launch the company's managed detection and response function in Israel (Apollo). This is a foundational role.

You'll start as the senior hands-on operator, running investigations, tuning detections, and handling the hardest incidents yourself. You will grow the team - hire, coach, and lead analysts, and set the standards they work to. You’ll work closely with product, detection engineering, and customer success to turn what we learn in the SOC into product improvements.

Responsibilities

• Launch the MDR service in Israel: scope, coverage model, escalation paths, and customer-facing SLAs

• Stand up the regional SOC operating model, including shift coverage, triage procedures, and case management

• Write and maintain runbooks and playbooks for common and high-severity threats across identity, cloud, endpoint, and SaaS

• Lead investigations and incident response for customer-facing detections, and own the hardest cases end to end

• Define the metrics that matter for the function, such as time to detect, time to triage, false positive rate, and customer impact

• Hire, onboard, and grow the MDR analyst team as demand scales

• Feed findings from investigations back to detection engineering and product so recurring gaps get fixed at the source

• Partner with customer success and solutions engineering on onboarding, escalations, and post-incident reviews

• Set on-call and coverage policies that are sustainable for the team

Qualifications

• 5+ years in security operations, incident response, or detection and response, with at least 2 years leading or senior-owning a SOC or MDR function

• Hands-on experience running investigations across identity, cloud, endpoint, and SaaS logs

• Track record of launching or significantly scaling a SOC or MDR service, including process, tooling, and team structure

• Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment

• Experience with SIEM, EDR/XDR, and SOAR platforms, and comfort with query languages such as KQL, SPL, or SQL

• Clear communicator who can brief customers and executives during active incidents

• Comfortable making decisions with incomplete information and owning the outcome

• Fluent in English (Hebrew is a plus)

Nice to Have

• Prior experience at an MDR provider or a managed security services team

• Experience selling into or supporting enterprise customers during security escalations

• Background in detection engineering or threat hunting

• Experience building runbooks or automation that reduced analyst workload

• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent