MDR Lead (Cybersecurity)

Location: Remote, Israel

Company

AI-driven cybersecurity platform helping enterprises detect, investigate, hunt, and respond to threats through live environment models and AI agents.

What you will do

• Launch the managed detection and response service in Israel, defining coverage models, escalation paths, and customer-facing SLAs.
• Establish the regional SOC operating model, including shift coverage, triage procedures, case management, on-call policies, and sustainable coverage standards.
• Write and maintain runbooks and playbooks for identity, cloud, endpoint, SaaS, and high-severity threats.
• Lead customer-facing investigations and incident response, owning the most complex cases end to end.
• Define operational metrics such as time to detect, time to triage, false-positive rate, and customer impact.
• Hire, onboard, and develop MDR analysts while partnering with product, detection engineering, customer success, and solutions engineering to improve the platform and support customers.

Requirements

• 5+ years of experience in security operations, incident response, or detection and response, including at least 2 years leading or owning a SOC or MDR function at a senior level.
• Hands-on experience investigating identity, cloud, endpoint, and SaaS logs.
• Experience launching or significantly scaling a SOC or MDR service, including its processes, tooling, and team structure.
• Strong understanding of MITRE ATT&CK and how real intrusions unfold across an environment.
• Experience with SIEM, EDR/XDR, and SOAR platforms, plus query languages such as KQL, SPL, or SQL.
• Clear communication skills for briefing customers and executives during active incidents.
• Ability to make decisions with incomplete information and own the outcome.
• Fluent English.

Nice to have

• Hebrew language skills.
• Experience at an MDR provider or managed security services team.
• Experience selling to or supporting enterprise customers during security escalations.
• Background in detection engineering or threat hunting.
• Experience building runbooks or automation that reduced analyst workload.
• Relevant certifications such as GCIH, GCIA, OSCP, or equivalent.

Culture & Benefits

• Remote work from Israel.
• Opportunity to build a foundational MDR function and shape its operating standards.
• Collaboration with experienced software engineers, AI researchers, security engineers, and product designers.
• Work on AI-driven cybersecurity for Fortune 500, Global 2000, and other enterprise customers.