Manager, Threat Research – Integration & Detections

About the role

Arctic Wolf is seeking a Manager of Threat Research focused on Integration and Detections. In this role you will lead a team that emulates adversary techniques, conducts threat research, and creates high‑quality detection content across endpoint, network, cloud, and identity telemetry.

Key responsibilities

• Lead and manage a team of threat researchers and detection developers, defining priorities with product, engineering, and security services stakeholders.
• Develop and deliver detection content for endpoint, network, cloud, and identity attack surfaces.
• Guide adversary emulation activities to uncover detection gaps and improve coverage.
• Oversee the full software development lifecycle, ensuring quality, scalability, and operational excellence.
• Drive creation of anomaly‑based and behavior‑based detections with focus on efficacy and customer value.
• Collaborate with architects and engineering leaders on technical initiatives and platform improvements.
• Monitor team performance, delivery metrics, and project execution.
• Lead recruitment, workforce planning, and budget management for the team.

Required profile

• 10+ years of cybersecurity experience with a focus on threat research, detection engineering, or signature development.
• Minimum 3 years of experience leading technical cybersecurity teams.
• Strong knowledge of Windows internals, event logging, and Sigma rule development.
• Experience with cloud and identity telemetry such as AWS CloudTrail and Microsoft Azure Activity Logs.
• Proven ability to develop, tune, and optimize anomaly‑based and behavior‑based detections.

Required skills

• Windows internals and event logging
• Sigma rule development
• AWS CloudTrail
• Microsoft Azure Activity Logs
• Network protocols and security architecture
• Intrusion detection and prevention systems
• Suricata rule development
• Python, Bash, PowerShell scripting
• SIEM platforms such as Splunk and Elasticsearch