Manager, Incident Response

• Lead and mature Arctic Wolf's Incident Response practice through strategic leadership, operational management, and advanced technical expertise
• Lead, mentor, develop, and manage a hybrid/remote team of Incident Response professionals
• Recruit, hire, onboard, train, and retain DFIR talent
• Oversee Incident Response service delivery and ensure consistent, scalable, high-quality outcomes
• Scope, monitor, and manage incident response engagements; assign personnel based on skills, availability, customer needs, and goals
• Maintain awareness of active investigations and recovery efforts, intervening when escalation or leadership is required
• Develop operational processes, standards, quality assurance mechanisms, KPIs, service metrics, and reporting capabilities
• Review incident reports, executive summaries, investigative findings, and customer deliverables
• Lead and support advanced digital forensic and incident response investigations
• Conduct and oversee host, network, cloud, and log-based forensic analysis across Windows, Linux, macOS, Azure, AWS, and Google Cloud
• Guide containment, eradication, recovery, and remediation during active security incidents
• Validate investigative findings and technical conclusions
• Develop investigation strategies and incident response plans
• Analyze evidence to determine threat activity and timelines, persistence mechanisms, data impact, and indicators of compromise
• Serve as a senior trusted advisor during cybersecurity incidents
• Communicate findings to executives, legal counsel, insurance carriers, and technical stakeholders
• Lead scoping discussions and engagement planning
• Support cyber extortion and ransomware negotiation strategy development and approval
• Present recovery plans, investigative findings, and recommendations to customers
• Build relationships with legal counsel, cyber insurance carriers, strategic partners, and customers
• Support business development, industry events, and thought leadership initiatives
• Partner with Directors and Executive Leadership on vision, strategy, growth, budgeting, forecasting, workforce planning, and scaling
• Identify automation, innovation, tooling, and operational efficiency opportunities
• Collaborate across Product, Engineering, Security Operations, Concierge, MDR, Sales, Marketing, and Customer Success
• Participate in escalation, evening, weekend, and holiday on-call rotations
• Conduct peer reviews, quality reviews, and case audits
• Promote information sharing, documentation, and organizational learning
• Perform other duties supporting Arctic Wolf's Incident Response mission

• 3+ years of experience leading technical teams, people management, or service delivery organizations
• Demonstrated experience leading complex cyber incident investigations and recovery efforts
• Strong knowledge of host, network, cloud, and enterprise forensic analysis
• Experience managing customer-facing engagements involving legal counsel, cyber insurance carriers, and executive stakeholders
• Exceptional verbal and written communication skills
• Experience developing operational processes, performance metrics, and quality assurance programs
• Ability to lead multiple concurrent initiatives and prioritize effectively in high-pressure environments
• Fluency in English, verbal and written
• Background checks are required for this position
• Offer may be conditioned on authorization to receive software or technology controlled under U.S. export control laws and regulations
• Bachelor's degree in Information Security, Digital Forensics, Computer Science, Cybersecurity, or a related discipline (preferred)
• Industry certifications such as GCFA, GCFE, CISSP, GCIH, EnCE, ACE, or equivalent (preferred)
• Experience within consulting, managed security services, or incident response service organizations (preferred)
• Experience presenting at industry conferences, customer events, or technical forums (preferred)
• Experience supporting large-scale enterprise incident response programs and global service delivery teams (preferred)
• Maintain required technical certifications and professional development goals

• Equity for all employees
• 28 days annual leave
• 10 public holidays
• Paid volunteering days off
• Comprehensive private benefits plan including medical, mental health, dental, disability, and value-added services
• Pension Plan with employer contribution
• Robust Employee Assistance Program (EAP) with mental health service
• Employee Discount Program with Beneplace
• Variable incentive compensation
• New hire equity grants
• Comprehensive benefits package
• Accommodations for candidates and employees with disabilities and/or other specific needs where possible