Manager Threat Research (Integration-Detections)

• Generate and manage the day-to-day work for the team.
• Work with the Product Team to define and deliver the six-month roadmap.
• Contribute to longer-term planning and strategy in partnership with the Director.
• Provide direction, clarity, and support to the team to ensure detection development activities remain focused on organizational and customer needs.

Team Leadership and Detection Development

• Manage teams responsible for delivering high-quality, innovative detection content spanning multiple telemetry sources.
• Work collaboratively with architects, developers, Product Managers, data engineers, and security analysts.
• Support the team by providing direction, clarity, and removing obstacles.
• Instill the Foundations of Research and Development within the team by living them on a daily basis.
• Set and maintain a high technical bar for detection quality, coverage, and false-positive rates across the team's output.
• Ensure teams are highly motivated, performing well, and delivering work on time.
• Ensure each team is clear on the objectives and goals they are striving to achieve.
• Work with team members to deliver key features.
• Build collaborative relationships with other teams and stakeholders within the organization.

Product Roadmap and Detection Strategy

• Execute the Product roadmap.
• Work with the Product Team to define and deliver the six-month roadmap.
• Work with Architects to define and execute on the company's technical roadmap.
• Drive detection coverage expansion across telemetry sources, ensuring breadth and depth of XDR detection capabilities.
• Champion cross-telemetry detection strategies that maximize coverage while minimizing false positives across diverse customer environments.
• Own detection quality metrics and continuously raise the bar on precision, recall, and mean-time-to-detect.
• Represent the team's work to senior leadership with data-driven reporting on detection coverage, efficacy, and operational impact.

Detection Development Lifecycle

• Oversee the full detection development lifecycle, from research and hypothesis through implementation, testing, tuning, and retirement.
• Establish and enforce rigorous peer review processes for all detection content before production deployment.
• Ensure the team delivers high-quality detection content across endpoint, network, cloud, identity, and email telemetry.
• Ensure detection development processes and engineering initiatives remain aligned with organizational policies and objectives.

Team Execution and Delivery

• Remove blockers preventing teams from getting their work done.
• Make sure each team is clear on the objectives and goals they are striving to achieve.
• Support the team in delivering key features and detection capabilities.
• Drive continuous development process improvements.
• Continuously improve team velocity and delivery predictability.
• Lead Agile development practices across the team.

Research and Development Responsibilities

• Implement the Research and Development Department and Team Responsibilities.
• Ensure teams are following Information Security Management System (ISMS) regulations, including: Secure Coding Practices Acceptable Use
• Establish and maintain processes that support technical excellence and secure detection development.

People Development and Mentoring

• Develop the careers of team members.
• Mentor each team member and help them grow their technical and leadership skills.
• Establish career development plans and achievable goals for direct reports.
• Conduct regular one-on-ones.
• Provide career and personal development coaching.
• Build a culture of continuous learning, knowledge sharing, and technical excellence.
• Maintain a clear history of learning and skills development across the team.
• Regularly help detection developers develop their skills in a variety of ways.
• Support and mentor individuals toward senior and lead roles.

Administrative and Financial Responsibilities

• Manage employee compensation and vacation time.
• Manage and approve conference and training budgets.
• Participate in helping set and manage the Directorate-level budget.
• Apply strong financial management skills to team and organizational responsibilities.

Recruitment

• Lead recruitment efforts for the team for both full-time and co-op employees.
• Be a key contributor to planning, hiring, and recruitment strategy for the team.
• Maintain a high hiring bar by assessing candidates for both depth of security knowledge and breadth of cross-domain thinking.

• 10+ years of experience in cybersecurity, with a strong focus on detection engineering, threat detection, or security analytics at scale.
• 3+ years of management or team lead experience in a cybersecurity or detection engineering role, with demonstrated success building and scaling high-performing teams.
• Deep understanding of diverse telemetry sources, including: Endpoint and Endpoint Detection and Response (EDR) Network and Network Detection and Response (NDR) Cloud, including Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) Identity Provider (IdP) telemetry Email security
• Hands-on experience normalizing and correlating signals across diverse telemetry sources.
• Proven track record of developing detection content using correlation rules, behavioral analytics, and machine learning-based approaches across heterogeneous data sources in production environments.
• Expert-level familiarity with Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) platforms and query languages such as Splunk Processing Language (SPL), Kusto Query Language (KQL), SQL, Sigma, or equivalent.
• Ability to evaluate detection efficacy through metrics-driven approaches.
• Strong knowledge of the MITRE ATT&CK framework and demonstrated experience applying it to detection coverage mapping, gap analysis, and prioritization.
• Proficiency in scripting languages such as Python, Bash, or PowerShell, with the ability to build tooling and automation for detection development workflows.
• Experience leading Agile development teams, preferably with formal Agile training.
• Track record of continuously improving team velocity and delivery predictability.
• A clear history of technical influence, such as public conference talks, published research, open-source contributions, patents, or similar contributions.
• A clear history of learning and skills development.
• Experience regularly helping detection developers develop their skills and mentoring individuals into senior or lead roles.
• Professional security certifications are required, such as CISSP, GCIA, GCIH, GCED, GREM, or OSCP.
• Permanently located in Bengaluru, India.

• Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Formal Agile training.
• Experience with machine learning-based detection approaches.
• Experience building and managing generalized detection capabilities across multiple telemetry sources.
• Experience with cross-telemetry detection strategies and XDR coverage.
• Experience with detection quality metrics, including precision, recall, and mean-time-to-detect.
• Experience with technical research, public speaking, published research, open-source contributions, or patents.

Do not meet all the requirements? That is okay. We still encourage you to apply. We have many opportunities and are always looking for strong talent.

Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion and value the unique perspectives all employees bring to the organization. By protecting sensitive data and working to end cyber risk, we contribute to an industry that serves the greater good. We celebrate diverse perspectives through our Pack Unity program and encourage employees to participate in or create new alliances. We also believe in corporate responsibility and have joined the Pledge One Percent movement to give back to our communities. All employees receive compelling compensation and benefits packages, including:

• Equity for all employees
• Flexible annual leave, paid holidays, and volunteer days
• Training and career development programs
• Comprehensive private benefits plan including medical insurance for you and your family, life insurance equal to three times compensation, and personal accident insurance
• Fertility support and paid parental leave

Arctic Wolf is an equal opportunity employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under applicable law. We are committed to fostering a welcoming, accessible, and inclusive environment.

• Conduct duties in accordance with Arctic Wolf information security policies, standards, processes, and controls
• Background checks are required for this position
• This role may require access to information protected under United States export control laws and regulations