Job description

ABOUT 7AI 7AI is the foundational AI security company. Founded in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, we came out of stealth in February 2025 to take on the non-human work of the SOC. Our platform pairs a federated SIEM with AI agents that detect, investigate, respond, and hunt, plus dedicated threat hunting and threat intelligence, with humans on the loop. Backed by $166 million in total funding from investors including Index Ventures and Blackstone, we're building the AI foundation for security operations in the agentic era, and we're still early. That's the appeal: you'll join at a pivotal stage where your work shapes what 7AI becomes, alongside security veterans who've built this before. Our culture runs on respect, collaboration, and a shared bar for excellence, all pointed at one goal, delivering real outcomes for the customers who trust us to defend them. OVERVIEW 7AI's AI agents take on a lot of the SOC's non-human work, but every agent investigation still needs a human who can verify it, prove the threat was real, and answer for it when a customer asks. As a Security Analyst, you'll be that person: validating and extending the work of 7AI's AI agents, investigating the malicious activity they catch, and hunting for emerging threats in customer environments. You'll work directly with customers, from SOC analysts to CISOs, to triage alerts and resolve incidents, and you'll help shape how this team operates as we grow it. WHAT YOU'LL DO - Analyze and validate AI Agent investigations for accuracy, completeness, and risk - Correlate data across cloud, endpoint, identity, and network sources to build the full picture of an attack - Investigate the malicious activity 7AI's Agents responded to, and assess the risk it prevented for customers - Use 7AI's Agents to hunt for emerging threats in customer environments, feeding what you find back into product detections - Help customers with threat monitoring, triage, and alert prioritization, especially during active incidents - Review logs and findings to proactively spot threats and anomalies in customer environments - Communicate with customers across a range of technical backgrounds, from SOC analysts to CISOs - Help build repeatable processes as we scale this team, without sacrificing quality - Work with Engineering and Product, sharing customer feedback and helping tune the AI platform - Stay current on emerging threats, vulnerabilities, and attack techniques, including AI-driven attacks WHAT WE'RE LOOKING FOR - 2+ years of experience in security operations - Comfortable with on-call weekend shifts as needed - Hands-on experience investigating alerts across endpoint, network, identity, email, and cloud sources, including intrusion detection systems and endpoint protection platforms - Strong understanding of security monitoring tools such as XDR, SIEM, IDS/IPS, and IDP - Familiarity with log and telemetry concepts - Working knowledge of common attack techniques and frameworks like MITRE ATT&CK, and incident triage methodologies - Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions - Experience querying SIEM data with SPL, KQL, FQL, or SQL - Familiarity with malware analysis methods - Strong interpersonal skills with a service-oriented mindset - A track record of collaborating well in a team NICE TO HAVE - Prior experience in a managed services environment - Incident handling experience - Relevant certifications: Security+, GSEC, or GCIH

Requirements

Must-haves

Analyze and validate AI Agent investigations for accuracy, completeness, and risk
Correlate data across cloud, endpoint, identity, and network sources to build the full picture of an attack
Investigate the malicious activity 7AI's Agents responded to, and assess the risk it prevented for customers
Use 7AI's Agents to hunt for emerging threats in customer environments, feeding what you find back into product detections
Help customers with threat monitoring, triage, and alert prioritization, especially during active incidents
Review logs and findings to proactively spot threats and anomalies in customer environments
Communicate with customers across a range of technical backgrounds, from SOC analysts to CISOs
Help build repeatable processes as we scale this team, without sacrificing quality
Work with Engineering and Product, sharing customer feedback and helping tune the AI platform
Stay current on emerging threats, vulnerabilities, and attack techniques, including AI-driven attacks
2+ years of experience in security operations
Comfortable with on-call weekend shifts as needed
Hands-on experience investigating alerts across endpoint, network, identity, email, and cloud sources, including intrusion detection systems and endpoint protection platforms
Strong understanding of security monitoring tools such as XDR, SIEM, IDS/IPS, and IDP
Familiarity with log and telemetry concepts
Working knowledge of common attack techniques and frameworks like MITRE ATT&CK, and incident triage methodologies
Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions
Experience querying SIEM data with SPL, KQL, FQL, or SQL
Familiarity with malware analysis methods
Strong interpersonal skills with a service-oriented mindset
A track record of collaborating well in a team

Nice-to-haves

Prior experience in a managed services environment
Incident handling experience
Relevant certifications: Security+, GSEC, or GCIH

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aisql

Platform: ashby
Effort: quick