At Arctic Wolf, we’re on a mission to end cyber risk.
We are a global leader in security operations, helping organizations stay resilient against evolving cyber threats through industry-leading security operations, threat intelligence, and a people-first approach to cybersecurity.
More than 3,000 Pack members across the world work together every day to protect our customers and empower security teams with new levels of speed, accuracy, and intelligence at scale. What sets us apart is our relentless focus on our customers, innovation at scale, and a collaborative culture where talented people can do meaningful work that truly makes a difference.
We’re constantly looking for talented people to join the Pack and help us take our performance to the next level.
About the Position:Position Overview
Operational Incident Commander responsible for solo commanding service incidents of any severity, including Sev1 and Sev2, from detection through technical resolution and through the postmortem that follows. This is the role that puts hands on the wheel during an active incident: assembling the response team, running the bridge, driving investigation, coordinating remediation in real time, and closing the loop with a postmortem and templated status communications.
Given the size of the Incident Commander team, Level 1 cannot be a narrow, entry-only role; it has to be able to run the full lifecycle of a routine incident independently, including publishing templated status updates and facilitating the postmortem for incidents it personally commanded. What Level 1 does not own is judgment that carries cross organizational visibility: finalizing severity for Sev1/Sev2, deciding on communications that fall outside the standard template, and authoring the formal RCA document sit with Level 2.
Primary Responsibilities and Duties
- Solo command incidents at any severity (Sev1 through Sev4) from detection through technical resolution, including Sev1/Sev2 incidents
- Assemble the appropriate response team and lead the command bridge (Zoom, incident channel) for the incident's duration
- Monitor and triage incoming incidents using Jira, Zendesk, and Statuspage; propose an initial severity assessment
- Lead technical investigation using Kibana, Grafana, and Unix command line tools to identify probable cause and drive remediation
- Gather input from tech leads and subject matter experts on symptoms, fixes, and remediation risk, and drive the incident to technical resolution
- Author and publish templated status page and incident updates directly, using existing templates
- Document the incident timeline, actions taken, and outcomes in real time in the incident tracking tool
- Run the postmortem for incidents using existing templates, and drive resulting action items to closure
- Chair COE Review meetings
- Follow and execute against existing incident response playbooks; flag gaps or outdated steps to a Level 2 Incident Commander
- Hand off RCA authorship and any communications that fall outside the standard template to a Level 2 Incident Commander at the appropriate point during, or immediately following, the incident
- Escalate incidents that carry ambiguous severity, cross organizational risk, or customer/reputational risk to a Level 2 or Level 3 Incident Commander
Key Skills
- Working knowledge of incident management and monitoring tooling (Jira, Zendesk, Statuspage, Kibana, Grafana)
- Working Unix command line proficiency
- Ability to stay calm, decisive, and organized while running a live bridge under time pressure
- Structured troubleshooting and technical investigation
- Comfort writing clear, templated customer facing status updates and facilitating a structured postmortem meeting
- Ability to recognize when a decision exceeds this level's scope and hand it off cleanly
Minimum Qualifications
- 0 to 3 years of IT support, NOC, or incident management experience
- Technical degree, diploma, or equivalent practical experience
- Demonstrated interest in networking, systems operations, or cybersecurity
- Customer facing experience in any capacity
Benefits
All wolves receive compelling compensation and benefits packages, including:
- Equity for all employees
- Flexible time off and paid volunteer days
- RRSP contribution and matching
- Training and career development programs
- Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
- Robust Employee Assistance Program (EAP) with mental health services
- Family-forming benefits, enhanced maternity benefits, and paid parental leave
Security Requirements
At Arctic Wolf, protecting our people, customers, and data is fundamental to how we operate. All employees are expected to uphold our commitment to security, privacy, and compliance by following internal information security policies, standards, and controls designed to safeguard the confidentiality, integrity, and availability of business, customer, employee, and other confidential information and to support compliance with applicable legal and regulatory requirements.
Depending on the role and where permitted by applicable law, employment may be subject to background verification and additional regulatory, security, or compliance requirements, including obligations related to data protection and export control laws, and authorization requirements where applicable.
Skills Required
- 0 to 3 years of IT support, NOC, or incident management experience
- Technical degree, diploma, or equivalent practical experience
- Demonstrated interest in networking, systems operations, or cybersecurity
- Customer-facing experience in any capacity
- Working knowledge of Jira, Zendesk, Statuspage, Kibana, and Grafana
- Working Unix command line proficiency
- Ability to remain calm, decisive, and organized while managing live incidents under time pressure
- Structured troubleshooting and technical investigation skills
- Ability to write clear templated customer-facing status updates and facilitate structured postmortems
- Ability to recognize decisions outside the role's scope and hand them off appropriately
Arctic Wolf Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Arctic Wolf and has not been reviewed or approved by Arctic Wolf.
-
Strong & Reliable Incentives — Incentive plans in sales roles are seen as strong when targets are met, with on‑target earnings positioned as competitive. This dynamic helps explain notably higher satisfaction in sales relative to other functions.
-
Equity Value & Accessibility — Equity is included for all employees across offers, broadening ownership beyond limited groups. Broad access to equity can provide meaningful upside tied to company performance.
-
Leave & Time Off Breadth — Flexible paid time off and dedicated volunteer time off are core parts of the package. These options expand avenues for time away beyond standard vacation and holidays.
Arctic Wolf Insights
What We Do
The cybersecurity industry has an effectiveness problem. Every year new technologies, vendors, and solutions emerge, and yet despite this constant innovation we continue to see high profile breaches in the headlines. All organizations know they need better security, but the dizzying array of options leave resource-constrained IT and security leaders wondering how to proceed. At Arctic Wolf, our mission is to End Cyber Risk through effective security operations. To achieve this, we believe that organizations must do three key things:
