Lead Information Security Engineer

At Arctic Wolf, youwon'tjust watch the cybersecurity industry evolve
-you'llhelp lead the change. Our global Pack is made up of people who thrive on solving hard problems, moving fast, and building technology that protects organizations around the world.

We'reproud to be recognized by Forbes, CNBC, Fortune, CRN, Bartner Peer Insight sand IDCMarket

Scape- but what matters most is the work behind it: delivering real outcomes for customers through award winning innovation like our Aurora Platform.

Ifyou’relooking for meaningful work, smartteammatesand the chance to make a real impact in a high-growth company that's redefining security operations,Arctic Wolf is the right place for you!

Our mission is simple:
End Cyber Risk. We're looking for a Lead Information Security Engineer to be part of making that happen.

The Lead Information Security Engineer is responsible for designing, implementing, and operating security capabilities that protect Arctic Wolf's internal environment. This role focuses on building and integrating security systems, combining off-the-shelf technologies with custom automation to deliver scalable, reliable, and measurable security outcomes.

This is a hands-on engineering role that requires strong systems thinking across operating systems, cloud platforms, identity, and networked environments. The engineer will partner closely with Security Architecture and Engineering teams to translate strategy into practical, well-integrated solutions.

The role emphasizes depth in understanding how systems work, combined with the ability to extend and automate security controls through scripting and lightweight engineering.

• Design and implement security solutions

  • Translate architectural patterns into real-world implementations across endpoint, cloud, identity, and network environments

  • Define technical approaches for deploying and integrating security controls

• Build and extend security systems

  • Build and configure security technologies (e.g., IAM, endpoint, SASE, vulnerability management)

  • Develop automation and integrations using scripting and APIs to close functional gaps and improve scale

  • Extend vendor platforms (e.g., Okta, Wiz, Prisma, etc.) to meet internal control requirements

• Drive system integration and platform maturity

  • Improve interoperability between tools to create cohesive security capabilities

  • Reduce manual processes through automation and reusable engineering patterns

  • Contribute to a platform-oriented approach to security capabilities (vs. siloed tools)

• Operate and continuously improve capabilities

  • Own services across their lifecycle:build, operate, optimize, retire

  • Monitor health, performance, and coverage of implemented controls

  • Identify gaps and drive iterative improvements aligned to risk reduction

• Partner across engineering and IT teams

  • Work closely with IT, infrastructure, and application teams to embed security into systems and workflows

  • Provide technical guidance on secure implementation patterns

  • Ensure solutions balance security, usability, and operational efficiency

• Contribute to technology selection and evaluation

  • Provide input into tool selection based on system fit, integration capability, and scalability

  • Evaluate vendor solutions and validate alignment with internal architecture

• Systems and Engineering Fundamentals

  • Strong understanding of operating systems (Linux/macOS/Windows), including system services, process behavior, and configuration management

  • Solid knowledge of networking fundamentals (TLS, routing, segmentation, identity-aware access)

  • Familiarity with cloud platforms (AWS preferred) and cloud-native architectures

• Automation and Integration

  • Experience with scripting and automation (e.g., Python, Bash) to integrate systems and automate workflows

  • Working knowledge of APIs, authentication flows, and system integrations

  • Ability to troubleshoot and debug issues across interconnected systems

• Security Domains

  • Working knowledge of security technologies and domains such as:

  • Identity and Access Management (IAM)

  • Endpoint security and device posture

  • Vulnerability management

  • SASE / Zero Trust access

  • Data protection and SaaS security

• Systems Thinking –…