Jobs at Arctic Wolf

Conduct full-cycle recruiting for technical and field-facing roles, managing searches from intake through offer acceptance. Partner with hiring managers, source passive candidates, build talent pipelines, screen applicants, provide market insights, maintain ATS data, and ensure timely candidate communication. The role manages multiple requisitions independently in a fast-paced technology environment and requires onsite work in Eden Prairie at least three days per week.

Develop backend features for real-time threat analysis and security operations automation. Build, test, maintain, and deploy microservices using Python, Golang, AWS, Kubernetes/EKS, CI/CD, and infrastructure-as-code practices. Contribute to architecture, code reviews, operational support, and AI-powered security workflows while collaborating in an agile engineering team.

Research and analyze cyber threats, malware, vulnerabilities, phishing, and telemetry to develop and tune Aurora Focus EDR detection rules. Apply MITRE ATT&CK, automate workflows with Python, conduct regression and end-to-end testing, support customer investigations, maintain documentation, generate metrics, and deliver threat briefings. Collaborate with threat intelligence and security services teams, participate in purple teaming, and manage production content releases.

Designs, builds, and maintains secure, reproducible lab environments for third-party integrations. The role develops infrastructure-as-code and automated provisioning pipelines, manages cloud and virtualization platforms, configures networking, supports APIs and event-driven integrations, and implements observability and secret management. It also provides troubleshooting, documentation, integration enablement, and collaboration with engineering, product, and vendor teams.

Leads large-scale software engineering projects from design through deployment, provides technical leadership and mentorship, contributes to architecture and engineering standards, drives testing and software quality, resolves production issues, develops scalable solutions, and collaborates across Product, UX, and Engineering teams. The role also supports Agile delivery, incident reviews, prioritization, stakeholder communication, and cross-team technical alignment.

Leads quality engineering for complex software projects by owning test strategies, designing end-to-end test cases, coordinating testing readiness, tracking quality metrics, managing defect triage, validating acceptance criteria, and mentoring quality engineers. The role requires strong software testing expertise, cloud application experience, test automation knowledge, technical leadership, and cross-functional collaboration.

Administer employee leave, disability, and workplace accommodation programs across multiple countries and jurisdictions. Manage cases from intake through return to work, coordinate with employees, managers, HR, payroll, benefits teams, vendors, and insurers, and ensure compliance with applicable regulations. Maintain accurate records, support reporting and audits, resolve complex cases, and improve processes using HR technology and AI-enabled tools.

Manage corporate customers using Arctic Wolf’s CyberSOC solution, driving renewals and expansion through consultative selling. Responsibilities include conducting quarterly business reviews, ensuring satisfaction, upselling services, advising customers on growth plans, resolving requests, forecasting at-risk accounts, and developing retention plans. The role requires Salesforce and spreadsheet proficiency, strong technology aptitude, customer service orientation, and approximately 10% or less business travel.

Manage a portfolio of SMB cybersecurity customers, driving renewals, expansions, satisfaction, quarterly business reviews, and upsell opportunities. Advise customers on Arctic Wolf services, resolve issues, prioritize requests, and develop growth plans. Monitor at-risk accounts, create mitigation strategies, forecast customer health, and communicate risks. The role requires consultative selling, technology aptitude, Salesforce and spreadsheet proficiency, fluent German and English, and strong customer service skills.

Design and build scalable backend, cloud-native, and cybersecurity automation platforms. Develop detection pipelines, incident response automation, security orchestration frameworks, and AI-powered workflows using LLMs, agentic frameworks, MCP, and RAG. Provide architectural leadership, mentor engineers, collaborate with security and data teams, and advance CI/CD, infrastructure-as-code, and platform scalability.

Conduct digital forensics and incident response investigations involving network intrusions, ransomware, business email compromise, and advanced persistent threats. Analyze Windows, Linux, and macOS hosts, network logs, cloud environments, malicious binaries, and forensic artifacts. Contain threats, recommend remediation, communicate findings to executives and legal counsel, scope cases, lead updates, mentor junior analysts, review reports, and participate in on-call escalation schedules.

Own the roadmap, backlog, requirements, and delivery of endpoint security cloud platform capabilities. Lead unified agent consolidation and migration of millions of endpoints across cloud backends, partnering with engineering, architecture, UX, managed services, support, and customers. Define scalable administration, policy, enrollment, multi-tenancy, and agent lifecycle features while tracking reliability, adoption, migration, quality, and customer satisfaction metrics.

Leads the Project Management Office and project/program management team, establishing governance, delivery standards, portfolio prioritization, capacity planning, executive reporting, and operating rhythms. Oversees strategic transformation initiatives, cross-functional coordination, risk management, M&A integration, dashboards, KPIs, QBRs, and organizational effectiveness while advising Business Applications leadership.

Leads the Adversary Research team, setting strategy and directing investigations into nation-state, criminal, ransomware, malware, and emerging cyber threats. Oversees threat hunting, malware analysis, infrastructure tracking, actor attribution, intelligence production, and development of detections and research tooling. Partners across security, incident response, product, and detection teams to operationalize findings, briefs executives and customers, develops researchers, and builds external intelligence-sharing relationships.

Supports People Experience operations through onboarding facilitation, HQ and global events, Town Halls, recognition programs, systems administration, reporting, workflow automation, and HR knowledge-base management. The role coordinates strategic projects, maintains tools including Confluence, Pyn, Bucketlist, E-Verify, and Luna, and partners cross-functionally to improve employee engagement and operational efficiency.

Develop and maintain Windows endpoint software and internal security tools. Integrate software components, debug complex systems, solve diverse technical problems independently, document functionality, and mentor junior developers. The role requires collaboration across global teams and familiarity with technologies such as .NET, C++, Go, AWS, Git, Docker, Kubernetes, Rust, and Windows kernel-mode development.

Lead DFIR investigations for network intrusions, AD compromises, and BEC incidents. Perform host and network forensics across Windows, Linux, and macOS, cloud forensics (Azure/AWS/GCP), use EDR/SIEM and forensic tools, contain and eradicate threats, produce written and verbal findings, mentor junior analysts, and participate in on-call rotations and peer reviews.

Manages security operations personnel, processes, customer services, metrics, incident escalations, ticket triage, and operational response. The role develops and improves security processes, analyzes service performance, leads incident-management training, mentors technical teams, collaborates across business units, and supports recruitment capacity planning. Candidates should have cybersecurity experience, knowledge of industry frameworks, and at least four years managing a SOC or customer support function.

Supports enterprise customers by managing security relationships, analyzing logs and system data, diagnosing security issues, overseeing network security infrastructure, handling customer requests, and mentoring junior analysts. The role combines security analysis, incident response consulting, technical support, architecture, and sales engineering responsibilities.

Leads strategic data analytics initiatives for Security Services, delivering executive insights, predictive models, machine learning pipelines, data pipelines, dashboards, and automated workflows. Partners with engineering, product, and senior leadership to translate complex business challenges into data-driven strategies, improve data governance, and implement AI and emerging technologies.