SOC Researcher

Ok - let’s make it short. We’re looking for a Security Researcher (SOC) with at least 3 years of experience in SOC operations, threat detection, or incident response, ideally from startups or military tech units. If you’re excited about turning real analyst expertise into AI systems and making a big impact in a fast-moving startup, this one’s for you.

• Architect, design, and build analyst-grade security investigations
• Translate real-world SOC and IR expertise into structured investigation logic that AI agents can execute
• Design and evaluate AI-driven investigation workflows and improve agent performance
• Build realistic security scenarios, simulations, and research environments
• Collaborate with AI engineers, product teams, and security practitioners

• At least 3 years of hands-on experience in SOC, threat detection, or incident response
• Strong familiarity with security tools such as SIEM, SOAR, EDR/XDR, and cloud security platforms
• Deep understanding of attacker behavior and investigation methodologies (e.g., MITRE ATT&CK)
• Experience building runbooks, playbooks, detections, or investigation procedures
• Ability to work autonomously, think in systems, and turn complex knowledge into scalable solutions

• Experience working with AI/ML teams or AI-driven systems
• Background in automation or building security workflows (SOAR, scripting, integrations)
• Experience with threat intelligence, malware analysis, or security research labs
• Familiarity with prompt design, model evaluation, or AI agent workflows

AI has enabled cyber attackers to move faster and at greater scale than ever before. Defenders need a new kind of tool - powerful enough to keep them ahead.

This is Legion. We are building the world’s first AI security analyst, designed to see, think, and act like an expert human analyst. This is a new kind of AI-powered SOC automation - one that learns how your security team actually works and scales that capacity across the organization.

Legion is a Series A startup backed by top-tier investors, with early traction among financial services, healthcare, and manufacturing customers. The market opportunity is massive, our tech is differentiated, and we’re moving fast.

If you're excited to help shape how security teams operate in the AI era - and want to build something meaningful from the ground up, we’d love to hear from you.