Senior Manager, Adversary Research at Arctic Wolf

Job description

#RunwiththePack At Arctic Wolf, we’re on a mission to end cyber risk . We are a global leader in security operations, helping organizations stay resilient against evolving cyber threats through industry-leading security operations, threat intelligence, and a people-first approach to cybersecurity. More than 3,000 Pack members across the world work together every day to protect our customers and empower security teams with new levels of speed, accuracy, and intelligence at scale. What sets us apart is our relentless focus on our customers, innovation at scale, and a collaborative culture where talented people can do meaningful work that truly makes a difference. We’re constantly looking for talented people to join the Pack and help us take our performance to the next level. About the Position: The Senior Manager, Adversary Research leads a team responsible for discovering, tracking, and explaining sophisticated cyber threats. This leader will define the team’s research strategy, direct complex technical investigations, and ensure findings translate into actionable intelligence, durable detections, stronger security outcomes, and authoritative reporting. This position reports to the Director, Adversary Operations. The ideal candidate combines strong people leadership with deep experience in adversary research and cyber threat intelligence. They can guide investigations across endpoint, network, malware, infrastructure, and open-source data while communicating complex findings to technical teams, executives, customers, and the broader security community. What You Will Do Define the strategy, priorities, and operating model for the Adversary Research team. Lead, coach, and develop experienced threat researchers, intelligence analysts, and technical specialists. Direct research into nation-state groups, cybercriminal organizations, ransomware operations, malware campaigns, and emerging adversary tradecraft. Oversee proactive hunting across large-scale telemetry to identify previously unknown campaigns, infrastructure, malware, and behavioral patterns. Establish rigorous standards for actor tracking, campaign clustering, attribution, analytical confidence, and intelligence production. Guide advanced malware analysis, threat hunting, infrastructure tracking, and the development of YARA, Sigma, behavioral detections, and research tooling. Partner with threat hunting, incident response, detection engineering, security operations, product, and vulnerability research teams to operationalize findings. Direct the production of tactical, operational, and strategic intelligence for technical, executive, customer, and public audiences. Brief senior leaders and customers on emerging threats, adversary activity, and research outcomes. Build relationships with industry peers, government partners, intelligence-sharing communities, and external researchers. What You Need to Succeed 12 or more years of experience in cyber threat intelligence, adversary research, threat hunting, malware analysis, incident response, or a related discipline. Three or more years of experience leading people, research programs, or multidisciplinary technical teams. Demonstrated success building or maturing a threat intelligence, adversary research, or related security function. Deep understanding of the intelligence lifecycle, intelligence requirements, collection management, all-source analysis, and structured analytic techniques. Strong knowledge of nation-state, cybercriminal, ransomware, initial-access, and malware ecosystems. Experience analyzing endpoint, network, cloud, identity, infrastructure, malware, and open-source data. Experience using frameworks such as MITRE ATT&CK and the Diamond Model to analyze adversary behavior and intrusion activity. Experience translating threat intelligence into detections, hunting strategies, incident response actions, defensive controls, or product improvements. Familiarity with YARA, Sigma, SIEM, EDR, SOAR, threat intelligence