Staff Threat Intelligence Researcher

arcticwolf; United States; Remote; USD 86,000 - 240,000; Full time

Benefits offered by this job

Equity

Flexible time off

Volunteer days

Retirement contributions and matching

Training and development

Health and wellbeing benefits

Job summary

Arctic Wolf is seeking a staff-level threat investigator to lead investigations into emerging threats, campaigns, and high-impact adversary activity. You will analyze security telemetry and open-source information to deliver evidence-based assessments, then convert findings into practical guidance for detections, incident response support, and customer protection.

You will develop repeatable investigation methods, mentor researchers, and raise threat research quality across teams, collaborating

Qualifications

• Expert-level ability to investigate adversary activity and develop defensible campaign assessments from varied evidence.
• Strong analytical judgment, including careful treatment of attribution, uncertainty, evidence, sensitive intelligence, and customer data.
• Ability to translate technical findings into clear impacts and recommended actions for technical, executive, and customer audiences.
• Experience producing operational intelligence that supports hunting, detection, response, or customer protection.

Responsibilities

• Lead rapid investigations of emerging threats, exploited vulnerabilities, malware campaigns, ransomware, and other adversary activity.
• Hunt across managed detection and incident response data to find campaigns, infrastructure, malware, and recurring intrusion behaviors.
• Correlate endpoint, network, cloud, identity, email, vulnerability, case, and open-source evidence; assess scope, timelines, and confidence.
• Produce timely threat assessments, advisories, hunting packages, campaign reports, and briefings for technical, customer, or executive audiences.
• Develop detection logic and indicators, and partner with response, hunting, detection engineering, and security operations teams to operationalize findings.
• Improve research methods, tooling, and automation; mentor researchers and share validated findings with relevant communities.

Skills

Expert-level threat investigation

Campaign assessment development

Analytical judgment

Communicating findings

Job description

Role overview

This staff-level individual contributor leads investigations into emerging threats, active campaigns, and high-impact adversary activity. The work combines analysis of security telemetry and open-source information to build evidence-based assessments, then turns findings into practical guidance, detections, incident response support, and customer protections. The role also helps establish repeatable investigation methods and raises the quality of threat research across teams.

Responsibilities

• Lead rapid investigations of emerging threats, exploited vulnerabilities, malware campaigns, ransomware, and other adversary activity.
• Hunt across managed detection and incident response data to find campaigns, infrastructure, malware, and recurring intrusion behaviors.
• Correlate endpoint, network, cloud, identity, email, vulnerability, case, and open-source evidence; assess scope, timelines, and confidence.
• Produce timely threat assessments, advisories, hunting packages, campaign reports, and briefings for technical, customer, or executive audiences.
• Develop detection logic and indicators, and partner with response, hunting, detection engineering, and security operations teams to operationalize findings.
• Improve research methods, tooling, and automation; mentor researchers and share validated findings with relevant communities.

Requirements

• Expert-level ability to investigate adversary activity and develop defensible campaign assessments from varied evidence.
• Strong analytical judgment, including careful treatment of attribution, uncertainty, evidence, sensitive intelligence, and customer data.
• Ability to translate technical findings into clear impacts and recommended actions for technical, executive, and customer audiences.
• Experience producing operational intelligence that supports hunting, detection, response, or customer protection.

Benefits and work setup

• The listing describes equity, flexible time off, paid volunteer days, retirement contributions and matching, training, and a broad benefits package that includes health and wellbeing support.
• A base salary range of $86,000-$240,000 annually is given for the job family; actual pay may vary by skills, experience, location, and level. Incentive compensation and equity grants may also be offered.