Trouvez votre prochaine opportunité

Recherchez des offres par métier, compétence et lieu. Vérifiez les exigences avant de préparer votre candidature.

Une recherche utile ne s’arrête pas à un intitulé séduisant. Comparez les missions, les exigences et les conditions avec votre expérience. Ce guide vous aide à sélectionner des opportunités, préparer des documents pertinents et vérifier où déposer chaque candidature.

L’interface est en français. Les intitulés et descriptions publiés par les entreprises restent dans leur langue d’origine, qui peut être l’anglais.

Effacer les filtres

Résultats : 13 025

← Retour aux résultats

Detection Engineer

Artemis

Télétravail

Lieu
Remote (Germany)
Horaires
FULL_TIME
Publié
11 oct. 2026

Avant de postuler, confirmez sur le site de l’entreprise que l’offre est toujours ouverte et consultez les conditions complètes.

Description du poste

L’interface est en français. Les intitulés et descriptions publiés par les entreprises restent dans leur langue d’origine, qui peut être l’anglais.

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield. Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor. We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto. Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford. Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more. We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base. About the Role We're looking for a Detection Engineer to own the detection content that powers the Artemis platform. You'll design, build, test, and continuously tune high-fidelity detections across cloud, identity, endpoint, and SaaS environments — treating detection as code, and using AI as a force multiplier at every step: authoring rules with AI assistance, and building anomaly detections that learn what's normal in each environment and flag what isn't. Detections at Artemis don't just fire alerts; they feed an AI-native investigation pipeline, so precision, rich context, and machine-readable output matter as much as coverage. This is a hands-on engineering role where every rule you ship directly determines what threats we catch for customers and how fast we catch them. Responsibilities Build and maintain the detection library - Design, implement, and own high-fidelity detections across cloud (AWS, Azure, GCP), identity (Okta, Entra ID), endpoint (EDR), and SaaS log sources, from hypothesis to production. Practice detection-as-code - Manage detection content like software: version-controlled rules, peer review, automated validation and testing, and CI/CD deployment across customer environments. Map and close coverage gaps - Measure detection coverage against MITRE ATT&CK, prioritize gaps based on real-world threat activity, and systematically close them. Validate against real attacks - Build and run attack simulations and test harnesses to prove detections fire on true positives and stay quiet on benign activity, before and after they ship. Tune relentlessly - Own false-positive and false-negative rates across the fleet: analyze detection performance data, tune noisy logic at the source, and sunset detections that no longer earn their keep. Use AI to write detections at scale - Leverage AI throughout the detection lifecycle: use AI-assisted workflows to author, convert, test, and document rules faster than any traditional team could, and build the tooling that makes AI-generated detection content trustworthy enough to ship. Build behavioral and anomaly-based detections - Go beyond static signatures: establish behavioral baselines of normal activity per environment (identity, cloud, SaaS usage patterns) and engineer anomaly detections that surface deviations — impossible travel, unusual privilege use, novel API activity — with high signal and low noise. Engineer detections for AI-powered investigation - Design detections that produce rich, structured context so the Artemis platform can investigate and resolve cases autonomously. Turn intelligence into detections - Translate threat intelligence, incident findings, and threat hunt results from our research and SOC teams into durable, behavioral detection logic. Partner with the SOC and research teams - Close the loop with Apollo analysts and security researchers: use case outcomes and analyst feedback to drive detection improvements, and give them documentation that makes every alert investigable. Support customer-specific tuning - Adapt and tune detection content to each customer's environment and business context, reducing noise without sacrificing coverage. Qualifications 5+ years of hands-on cybersecurity experience, with significant time in detection engineering Proven track record designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms Strong proficiency in detection languages and formats such as Sigma, KQL, SPL, or YARA-L, and comfort writing code (Python preferred) for automation and testing Deep knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they manifest in logs across cloud, identity, endpoint, and SaaS telemetry Experience with detection-as-code workflows: Git, peer review, automated testing, and CI/CD for detection content Experience using AI tools to accelerate detection authoring, tuning, or validation — and judgment about when AI-generated logic is ready to ship Experience building behavioral or anomaly-based detections: establishing baselines of normal activity and engineering detections that flag meaningful deviations Strong log-analysis skills and demonstrated ability to distinguish malicious activity from benign noise across diverse data sources Clear written and verbal communication — able to document detection logic and explain coverage and trade-offs to engineers, analysts, and customers Bonus Experience in an MDR, MSSP, or high-volume SOC environment Experience with attack simulation and validation frameworks (Atomic Red Team, purple teaming) Background in threat hunting or incident response across cloud environments Experience with UEBA platforms or statistical/ML-based detection methods (peer grouping, time-series baselining, outlier scoring) Experience building AI-assisted detection or investigation tooling from scratch Contributions to open-source detection content or the broader detection engineering community Why Work at Artemis? Make a real world impact. You'll lead the human layer of defense that protects real companies. Every standard you set and process you sharpen raises the quality of protection customers depend on. Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place. Push the boundaries of technology. Lead a SOC built on the most advanced AI capabilities in cybersecurity, where the platform automates detection, investigation, and tuning, and your team owns the expertise, response, and relationship. You'll define what a modern, AI-native MDR looks like. Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You'll have the autonomy to shape the direction of the operation and own outcomes, not just run a runbook. If you are passionate about cyber security and want to build and lead the team at the cutting edge of AI-powered defense, we'd love to hear from you. Compensation We offer a competitive compensation of $160,000-190,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed. Equal Opportunity At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.

Recherchez, comparez et préparez votre candidature

Commencez par un métier ou une compétence que vous souhaitez utiliser. Ajustez les filtres de lieu et de métier, puis ouvrez les offres pour comparer les responsabilités. Si vous ne trouvez aucun résultat, essayez un terme plus court ou retirez un filtre à la fois.

Distinguez les exigences indispensables des préférences. Vérifiez les horaires, la rémunération et le lieu lorsqu’ils sont indiqués. Un poste à distance peut imposer un pays de résidence, une autorisation de travail ou des horaires compatibles. Confirmez la disponibilité et les conditions complètes auprès de l’entreprise.

Choisissez des exemples réels de votre expérience qui répondent aux besoins du poste. Expliquez votre contribution et n’utilisez des chiffres que si vous pouvez les justifier. Suivez les consignes de l’entreprise et vérifiez vos coordonnées, le contenu et le PDF avant l’envoi.

Avant d’envoyer votre candidature

Questions sur la recherche d’emploi

Pourquoi certaines annonces sont-elles en anglais ?

Les employeurs rédigent leurs propres intitulés et descriptions. Nous conservons ces textes pour ne pas modifier les exigences ou les conditions. La navigation et ce guide sont en français. Si une recherche en français ne donne rien, essayez aussi le métier ou la compétence dans la langue de l’annonce, par exemple « software engineer ».

Un poste à distance permet-il de travailler depuis n’importe quel pays ?

Pas nécessairement. L’entreprise peut limiter les pays de résidence, exiger une autorisation de travail ou imposer des horaires. Consultez l’annonce originale. Si ces informations manquent, demandez confirmation à l’employeur avant de considérer que le poste est accessible depuis votre lieu de résidence.

Que faire si aucun résultat ne s’affiche ?

Essayez un intitulé plus général ou une seule compétence et retirez les filtres un par un. Les intitulés varient selon les entreprises. Si une annonce précise a disparu, recherchez sa référence sur la page carrières de l’entreprise ; élargir la recherche ne rouvre pas un poste fermé.

Ma candidature est-elle envoyée depuis ResumizeAI ?

Le bouton de candidature ouvre un site externe. Suivez les instructions de l’employeur ou du prestataire de recrutement et confirmez l’envoi sur ce site. Préparer un CV dans ResumizeAI ne dépose pas de candidature. Si le lien mène seulement au site de l’entreprise, recherchez d’abord le poste concerné.

Comment adapter mon CV et ma lettre de motivation ?

Reliez les exigences à des projets, missions et résultats que vous pouvez expliquer. Mettez en avant votre expérience pertinente sans inventer de compétences. Dans la lettre, expliquez votre intérêt avec un exemple concret. Respectez la langue et le format demandés, puis relisez les deux documents avant de les envoyer.