Incident Response Operations

• Oversee the delivery of Incident Response services to ensure consistent, scalable, and high-quality outcomes.

• Scope incoming matters, monitor, and manage incident response engagements across the team.

• Assign personnel to engagements based on skillsets, availability, customer needs, and goals.

• Maintain awareness of all active investigations and recovery efforts, stepping in when escalation or leadership intervention is required.

• Ensure proper case management practices, utilization targets, resource planning, scheduling, and workload balancing.

• Develop and implement operational processes, standards, and quality assurance mechanisms.

• Review incident reports, executive summaries, investigative findings, and customer deliverables prior to delivery.

• Establish and maintain key performance indicators (KPIs), service metrics, and operational reporting capabilities.

• Drive continuous improvement initiatives that enhance efficiency, consistency, customer satisfaction, and service quality.

• Provide technical leadership and mentorship to team members throughout engagements and forensic activities

Technical Incident Response & Forensics

• Lead and support advanced digital forensic and incident response investigations.

• Conduct and oversee host, network, cloud, and log-based forensic analysis.

• Perform investigative activities involving Windows, Linux, macOS, Azure, AWS, and Google Cloud environments.

• Guide containment, eradication, recovery, and remediation activities during active security incidents.

• Validate investigative findings and technical conclusions developed by team members.

• Develop complex investigation strategies and incident response plans for customer environments.

• Conduct forensic analysis through collected evidence to determine threat actor activity and timeline, identify persistent mechanisms, data impact and indicators of compromise.

• Maintain expert-level knowledge of emerging threats, attack methodologies, ransomware trends, and DFIR best practices.

• Participate directly in the most complex, high-risk, or high-visibility engagements, when required.

Customer & Stakeholder Engagement

• Serve as a senior trusted advisor during active cybersecurity incidents.

• Communicate technical findings to executive leadership, legal counsel, insurance carriers, and technical stakeholders.

• Lead scoping discussions and engagement planning for new incident response matters.

• Support cyber extortion and ransomware negotiation strategy development and approval.

• Present recovery plans, investigative findings, and strategic recommendations to customer stakeholders.

• Build and maintain relationships with legal counsel, cyber insurance carriers, strategic partners, and customers.

• Support business development activities, attend industry events, and thought leadership initiatives as needed.

• Recommend Arctic Wolf solutions and services where appropriate based on customer needs.

Strategic Leadership & Program Development

• Partner with Directors and Executive Leadership to execute the vision, strategy, and growth plans for the Incident Response organization.

• Identify opportunities for automation, innovation, tooling improvements, and operational efficiencies.

• Define and standardize processes, methodologies, documentation, and service delivery frameworks.

• Drive reporting and analytics initiatives that demonstrate business impact, customer outcomes, operational efficiency, and risk reduction.

• Collaborate across Product, Engineering, Security Operations, Concierge, MDR, Sales, Marketing, and Customer Success teams.

• Support strategic planning, budgeting, forecasting, workforce planning, and organizational scaling initiatives.

• Champion quality assurance programs, service delivery excellence, and customer experience improvements

General Responsibilities

• Create and participate in escalation, evening, weekend, and holiday on-call rotations.

• Conduct peer reviews, quality reviews, and case audits.

• Promote information sharing, documentation, and organizational learning.

• Maintain required technical certifications and professional development goals.

• Perform other duties as assigned in support of Arctic Wolf's Incident Response mission and organizational objectives.

​Key Skills

• Digital Forensics & Incident Response (DFIR)

• Leadership and Team Development

• Incident Command and Crisis Management

• Cyber Extortion and Ransomware Response

• Executive Communication

• Customer Relationship Management

• Strategic Planning

• Operational Excellence

• Process Development and Standardization

• Performance Metrics and Reporting

• Cloud and Enterprise Incident Response

• Investigation Quality Assurance

• Resource Planning and Utilization Management

• Stakeholder Management

• Cross-Functional Collaboration

• Project and Program Management

Minimum Qualifications

• 3+ years of experience leading technical teams, people management, or service delivery organizations.

• Demonstrated experience leading complex cyber incident investigations and recovery efforts.

• Strong knowledge of host, network, cloud, and enterprise forensic analysis.

• Experience managing customer-facing engagements involving legal counsel, cyber insurance carriers, and executive stakeholders.

• Exceptional verbal and written communication skills.

• Experience developing operational processes, performance metrics, and quality assurance programs.

• Ability to lead multiple concurrent initiatives and prioritize effectively in high-pressure environments.

• Fluency in English, verbal and written

Preferred Qualifications

• Bachelor's degree in Information Security, Digital Forensics, Computer Science, Cybersecurity, or a related discipline.

• Industry certifications such as GCFA, GCFE, CISSP, GCIH, EnCE, ACE, or equivalent.

• Experience within consulting, managed security services, or incident response service organizations.

• Experience presenting at industry conferences, customer events, or technical forums.

• Experience supporting large-scale enterprise incident response programs and global service delivery teams

About Arctic Wolf

At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2024), Best Places to Work – USA (2021-2024), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2025), and Kununu Top Company – Germany (2025). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 7,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry.

Our Values 

Arctic Wolf recognises that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organisations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good.  We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.   We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. 

All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees

• 28 days annual leave, 10 public holidays and paid volunteering days off

• Comprehensive private benefits plan including medical, mental health, dental, disability, and value-added services

• Pension Plan with employer contribution

• Robust Employee Assistance Program (EAP) with mental health service

• Employee Discount Program with Beneplace

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, colour, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing . 

Security Requirements 

• Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).

• Background checks are required for this position. 

• This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”). Please note that, if applicable, an offer for employment will be conditioned on authorisation to receive software or technology controlled under these U.S. export control laws and regulations.

Ready to Make an Impact?
Apply now with your CV to join one of the fastest-growing and most innovative cybersecurity companies in the world.

The base salary range for this job family is 89,000 to 133,000 EUR annually. This range reflects the base pay the company reasonably expects to offer for this position, aligned to the broader job family base pay structure. Actual base pay may vary based on skills, experience, and location, including job family level. In addition to base pay, Arctic Wolf offers variable incentive compensation, new hire equity grants, and a comprehensive benefits package.

Originally posted on Himalayas