Jobs at Arctic Wolf

Lead advanced threat intelligence research: track threat actors, analyze malware (static/dynamic), investigate C2 infrastructure, apply MITRE ATT&CK and Diamond Model, translate findings into detections (YARA, Sigma, Suricata) and threat hunts, analyze Windows/macOS internals, use SQL/Python/Excel for large-scale correlation, develop automation/enrichment, partner with SOC/MDR, mentor peers, and publish technical research.

Lead messaging, positioning, and go-to-market strategy for MDR products. Develop marketing assets, enable Sales with tools and competitive insights, conduct market analysis, build personas/use cases, partner with Product and Pricing, design campaigns to drive awareness and revenue, and lead a small product marketing team.

Lead and grow an Application Security team, embed secure development practices, drive AppSec strategy and metrics, oversee threat modeling and vulnerability management, and scale security testing (SAST/DAST/SCA/secrets/container/cloud-native). Partner with engineering and product leaders to prioritize risk, enable Security Champions, and support secure adoption of emerging technologies including AI/GenAI.

Develop, test, and deploy threat detections and risk-based alerting in a SIEM; analyze security events across network, endpoint, and log sources; support incident escalations; implement and integrate security technologies (SIEM, SOAR, EDR, TIP); map detections to MITRE ATT&CK; collaborate with cloud and architecture teams; contribute to Agentic AI SOC capabilities and overall security program improvements.

As a Cybersecurity Engineer 2, you will collaborate with senior engineers, assist with client inquiries on security incidents, analyze vulnerabilities, and create technical documentation while developing your skills.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.

Develop, document, and implement Salesforce-centric integration solutions across the business application ecosystem. Build and maintain integrations (API, microservices), implement full development solutions (Apex, LWC, JavaScript, Python, AWS), support UAT, releases and production, and partner with business stakeholders to translate requirements into secure, maintainable solutions. Lead evaluations, recommend and implement technology to meet business objectives, and provide ongoing support and process expertise.

Build and maintain large-scale, cloud-based detection and threat-intelligence systems. Design, implement, and ship high-throughput streaming data pipelines and production-grade APIs, mentor engineers, lead architecture and cross-functional initiatives, remove technical debt, and ensure operational excellence including on-call support and security best practices.

Senior Full Stack Developer for Arctic Wolf's SOAR team responsible for designing and delivering scalable backend services and modern user experiences. Lead architecture, build cloud-native microservices, design APIs, deploy with Docker/Kubernetes on AWS/GCP, maintain CI/CD and observability, mentor engineers, and drive engineering best practices across cross-functional teams.

Lead and resolve complex escalations across software, cloud, and infrastructure. Perform deep debugging (logs, memory dumps, kernel debugging), reproduce issues, author/review fixes, shape observability and diagnostics, mentor engineers, drive systemic improvements, and collaborate with R&D and product teams. May include on-call duties and light travel.

Investigate and resolve complex, escalated customer-facing issues across software, cloud, and infrastructure. Perform deep debugging, log and memory analysis, reproduce issues, contribute code fixes, drive automation, and collaborate with R&D, Support, and Product to improve diagnostics and operational maturity.

Lead and manage AI teams to design, train, deploy, and operate production-grade ML and generative AI systems for security detection and response. Define AI roadmap, partner with product and platform teams, uphold secure MLOps practices, mentor staff, recruit talent, and deliver scalable, observable AI integrated into production cloud environments.

Lead vision, architecture, and execution for Arctic Wolf's Endpoint Platform. Oversee 150+ global engineers to build cloud-native, scalable endpoint protection (EDR/XDR), embed AI/ML, improve telemetry processing, and establish DevSecOps, CI/CD, observability, and secure SDLC practices. Partner across Product, AI, Cloud, and Threat Research and recruit and develop engineering leadership to increase velocity, quality, and platform resiliency.

Design, build, and maintain scalable, production-like lab environments and automated provisioning pipelines to accelerate vendor integrations. Support virtualization, cloud, networking, observability, security controls, mock services, and troubleshooting to enable reliable integration development and testing.

Lead product strategy and execution for Endpoint Detection & Response (EDR). Drive cross-functional collaboration with R&D, UX, Security Services, Sales, and Customer Success to deliver an EDR product to market. Prioritize backlog, streamline processes, and measure product performance while supporting global teams and operational needs.

Design, build, and maintain scalable, production-like lab environments to accelerate third-party integrations. Implement IaC, automated provisioning, observability, networking, security controls, and documentation while supporting troubleshooting and vendor integration workflows.

Drive end-to-end new business acquisition of small-to-medium enterprise customers across a defined UK territory. Build and manage a pipeline (15–25 active opportunities), run discovery, lead sales campaigns with a presales partner, engage channel partners, and close new logo SaaS/security/technology deals while collaborating with marketing, SDRs, and internal stakeholders.

Design, optimize, and maintain high-throughput database systems for a cloud security platform, ensuring reliability and performance across various environments.