{"id":1441985,"url":"https://alion.io/job/arctic-wolf-manager-threat-research-integration-detections","title":"Manager Threat Research (Integration-Detections)","company":{"id":1025,"name":"Arctic Wolf","domain":"arcticwolf.com","url":"https://alion.io/company/arctic-wolf","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":18,"ghost_share":0,"stale_share":0.389,"repost_share":0.056,"time_to_fill_p50_days":39,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":63000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Machine Learning","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-09-29T05:09:51Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-23T19:05:25Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"At Arctic Wolf, you will not just watch the cybersecurity industry evolve - you will help lead the change. Our global team is made up of people who thrive on solving complex problems, moving quickly, and building technology that protects organizations around the world. We are proud to be recognized by Forbes, CNBC, Fortune, CRN, Gartner Peer Insights, and International Data Corporation MarketScape. What matters most is the work behind these recognitions: delivering real outcomes for customers through award-winning innovation such as our Aurora Platform.\nIf you are looking for meaningful work, smart teammates, and the opportunity to make a real impact in a high-growth company that is redefining security operations, Arctic Wolf is the right place for you.\nOur mission is simple: End Cyber Risk.\nWe are looking for a Manager - Detection Engineering, XDR to lead detection development activities and help achieve our mission of End Cyber Risk.\nThe Manager - Detection Engineering, XDR plans and directs all aspects of detection development activities within their team. This includes ensuring that engineering projects, initiatives, and processes are aligned with the organization's established policies and objectives.\nThe Manager reports to a Senior Manager of Research and Development and works closely with Research and Development Leadership, Product Management, and Security Services (S2) to ensure the team is building what our customers and users need in a timely manner.\nThis is a detection development team responsible for building generalized detections across multiple telemetry sources, including endpoint, network, cloud, identity, and email, to provide broad Extended Detection and Response (XDR) coverage for customers. Managers may also have specialized subject matter expertise within the technical areas their teams support.\nSCOPE OF ROLE\nGenerate and manage the day-to-day work for the team.\nWork with the Product Team to define and deliver the six-month roadmap.\nContribute to longer-term planning and strategy in partnership with the Director.\nProvide direction, clarity, and support to the team to ensure detection development activities remain focused on organizational and customer needs.\nIN THIS ROLE, YOU WILL:\nTeam Leadership and Detection Development\nManage teams responsible for delivering high-quality, innovative detection content spanning multiple telemetry sources.\nWork collaboratively with architects, developers, Product Managers, data engineers, and security analysts.\nSupport the team by providing direction, clarity, and removing obstacles.\nInstill the Foundations of Research and Development within the team by living them on a daily basis.\nSet and maintain a high technical bar for detection quality, coverage, and false-positive rates across the team's output.\nEnsure teams are highly motivated, performing well, and delivering work on time.\nEnsure each team is clear on the objectives and goals they are striving to achieve.\nWork with team members to deliver key features.\nBuild collaborative relationships with other teams and stakeholders within the organization.\nProduct Roadmap and Detection Strategy\nExecute the Product roadmap.\nWork with the Product Team to define and deliver the six-month roadmap.\nWork with Architects to define and execute on the company's technical roadmap.\nDrive detection coverage expansion across telemetry sources, ensuring breadth and depth of XDR detection capabilities.\nChampion cross-telemetry detection strategies that maximize coverage while minimizing false positives across diverse customer environments.\nOwn detection quality metrics and continuously raise the bar on precision, recall, and mean-time-to-detect.\nRepresent the team's work to senior leadership with data-driven reporting on detection coverage, efficacy, and operational impact.\nDetection Development Lifecycle\nOversee the full detection development lifecycle, from research and hypothesis through implementation, testing, tuning, and retirement.\nEstablish and enforce rigorous peer review processes for all detection content before production deployment.\nEnsure the team delivers high-quality detection content across endpoint, network, cloud, identity, and email telemetry.\nEnsure detection development processes and engineering initiatives remain aligned with organizational policies and objectives.\nTeam Execution and Delivery\nRemove blockers preventing teams from getting their work done.\nMake sure each team is clear on the objectives and goals they are striving to achieve.\nSupport the team in delivering key features and detection capabilities.\nDrive continuous development process improvements.\nContinuously improve team velocity and delivery predictability.\nLead Agile development practices across the team.\nResearch and Development Responsibilities\nImplement the Research and Development Department and Team Responsibilities.\nEnsure teams are following Information Security Management System (ISMS) regulations, including: Secure Coding Practices Acceptable Use\nEstablish and maintain processes that support technical excellence and secure detection development.\nPeople Development and Mentoring\nDevelop the careers of team members.\nMentor each team member and help them grow their technical and leadership skills.\nEstablish career development plans and achievable goals for direct reports.\nConduct regular one-on-ones.\nProvide career and personal development coaching.\nBuild a culture of continuous learning, knowledge sharing, and technical excellence.\nMaintain a clear history of learning and skills development across the team.\nRegularly help detection developers develop their skills in a variety of ways.\nSupport and mentor individuals toward senior and lead roles.\nAdministrative and Financial Responsibilities\nManage employee compensation and vacation time.\nManage and approve conference and training budgets.\nParticipate in helping set and manage the Directorate-level budget.\nApply strong financial management skills to team and organizational responsibilities.\nRecruitment\nLead recruitment efforts for the team for both full-time and co-op employees.\nBe a key contributor to planning, hiring, and recruitment strategy for the team.\nMaintain a high hiring bar by assessing candidates for both depth of security knowledge and breadth of cross-domain thinking.\nWE'RE LOOKING FOR SOMEONE WITH EXPERIENCE IN:\n10+ years of experience in cybersecurity, with a strong focus on detection engineering, threat detection, or security analytics at scale.\n3+ years of management or team lead experience in a cybersecurity or detection engineering role, with demonstrated success building and scaling high-performing teams.\nDeep understanding of diverse telemetry sources, including: Endpoint and Endpoint Detection and Response (EDR) Network and Network Detection and Response (NDR) Cloud, including Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) Identity Provider (IdP) telemetry Email security\nHands-on experience normalizing and correlating signals across diverse telemetry sources.\nProven track record of developing detection content using correlation rules, behavioral analytics, and machine learning-based approaches across heterogeneous data sources in production environments.\nExpert-level familiarity with Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) platforms and query languages such as Splunk Processing Language (SPL), Kusto Query Language (KQL), SQL, Sigma, or equivalent.\nAbility to evaluate detection efficacy through metrics-driven approaches.\nStrong knowledge of the MITRE ATT&CK framework and demonstrated experience applying it to detection coverage mapping, gap analysis, and prioritization.\nProficiency in scripting languages such as Python, Bash, or PowerShell, with the ability to build tooling and automation for detection development workflows.\nExperience leading Agile development teams, preferably with formal Agile training.\nTrack record of continuously improving team velocity and delivery predictability.\nA clear history of technical influence, such as public conference talks, published research, open-source contributions, patents, or similar contributions.\nA clear history of learning and skills development.\nExperience regularly helping detection developers develop their skills and mentoring individuals into senior or lead roles.\nProfessional security certifications are required, such as CISSP, GCIA, GCIH, GCED, GREM, or OSCP.\nPermanently located in Bengaluru, India.\nNICE TO HAVE:\nBachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.\nFormal Agile training.\nExperience with machine learning-based detection approaches.\nExperience building and managing generalized detection capabilities across multiple telemetry sources.\nExperience with cross-telemetry detection strategies and XDR coverage.\nExperience with detection quality metrics, including precision, recall, and mean-time-to-detect.\nExperience with technical research, public speaking, published research, open-source contributions, or patents.\nDo not meet all the requirements? That is okay. We still encourage you to apply. We have many opportunities and are always looking for strong talent.\nOn-Camera Policy\nTo support a fair, transparent, and engaging interview experience, candidates interviewing remotely are expected to be on camera during all video interviews. Being on camera fosters authentic connection, improves communication, and allows for full engagement from both candidates and interviewers. We understand that technical, bandwidth, or location-related challenges may occasionally prevent video use. If this applies, candidates are required to notify us in advance so we can explore appropriate accommodations.\nAt Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace United States, Best Places to Work United States, Great Place to Work Canada, Great Place to Work United Kingdom, and Kununu Top Company Germany. Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand and enhance our technology, Arctic Wolf remains a trusted name in the industry.\nOur Values\nArctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion and value the unique perspectives all employees bring to the organization. By protecting sensitive data and working to end cyber risk, we contribute to an industry that serves the greater good.\nWe celebrate diverse perspectives through our Pack Unity program and encourage employees to participate in or create new alliances.\nWe also believe in corporate responsibility and have joined the Pledge One Percent movement to give back to our communities.\nAll employees receive compelling compensation and benefits packages, including:\nEquity for all employees\nFlexible annual leave, paid holidays, and volunteer days\nTraining and career development programs\nComprehensive private benefits plan including medical insurance for you and your family, life insurance equal to three times compensation, and personal accident insurance\nFertility support and paid parental leave\nArctic Wolf is an equal opportunity employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under applicable law. We are committed to fostering a welcoming, accessible, and inclusive environment.\nSecurity Requirements\nConduct duties in accordance with Arctic Wolf information security policies, standards, processes, and controls\nBack...","description_format":"text","description_chars":12154,"description_truncated":true,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Continuous learning","Equity","Health insurance","Life insurance","Parental leave"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Security Operations","Managed Security"],"lifecycle":[{"event":"open","at":"2026-09-29T05:09:51Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.841,"p_room":0.9,"age_days":24,"expected_fill_days":39,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/arctic-wolf-manager-threat-research-integration-detections","json_url":"https://alion.io/job/arctic-wolf-manager-threat-research-integration-detections.json","meta":{"generated_at":"2026-10-24T00:15:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":367,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1025},"rest":"https://alion.io/mcp/rest/get_company?id=1025"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farctic-wolf-manager-threat-research-integration-detections"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farctic-wolf-manager-threat-research-integration-detections"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farctic-wolf-manager-threat-research-integration-detections"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arctic-wolf-manager-threat-research-integration-detections\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farctic-wolf-manager-threat-research-integration-detections"}]}