Senior Director, Information Security Engineering

At Arctic Wolf, we're not just navigating the cybersecurity landscape - we're redefining it. Our global team of dedicated Pack members is driving innovation and setting new industry standards every day. Our impact speaks for itself: we've earned recognition on the Forbes Cloud 100, CNBC Disruptor 50, Fortune Future 50, and Fortune Cyber 60 lists, and we recently took home the 2024 CRN Products of the Year award. We’re proud to be named a Leader in the IDC MarketScape for Worldwide Managed Detection and Response Services and earning a Customers' Choice distinction from Gartner Peer Insights. Our Aurora Platform also received CRN’s Products of the Year award in the inaugural Security Operations Platform category. Join a company that’s not only leading, but also shaping, the future of security operations. 

Our mission is simple: End Cyber Risk. We’re looking for a Senior Director, Security Engineering to be part of making that happen.

Arctic Wolf is seeking a Senior Director of Security Engineering to lead the design, development, and operation of scalable security capabilities that protect the company’s products, platforms, and enterprise environment. This role is responsible for building and guiding high-performing engineering teams across domains such as network security, identity, and systems security. The Senior Director partners closely with Engineering, IT, Product, and Business Applications leaders to embed security into core business systems and processes, ensuring security controls are effective, pragmatic, and aligned to how the company builds and operates technology.

Responsibilities:

Security Engineering & IAM Leadership

• Lead, mentor, and develop Security Engineering and IAM leaders and engineers; set clear role expectations, establish career paths, and build succession plans.
• Build and sustain a high‑performing, inclusive organization with strong delivery discipline, accountability, and technical excellence.
• Foster a culture of engineering rigor, automation, and continuous improvement.

Security Platforms, Guardrails, and Automation

• Define and execute the Security Engineering and IAM strategy and program portfolio, including:
  • Identity and Access Management (SSO, MFA, identity lifecycle automation, privileged access management)
  • Zero Trust / ZTNA enablement
  • Secrets management and cryptographic lifecycle (PKI, certificates, encryption standards)
  • Infrastructure and system hardening
  • Security platforms and automation (scanning, enforcement, guardrails)
  • Supply‑chain, SaaS, and third‑party security controls
  • Deliver reusable security capabilities that integrate cleanly with CI/CD pipelines, cloud services, SaaS and identity systems.

Cross‑Functional Execution Model

• Establish durable engagement models with R&D, IT, and Business Applications teams by:
  • Influencing requirements and designs before work begins
  • Aligning priorities and roadmaps to business and security outcomes
  • Communicating progress, risk, and tradeoffs to stakeholders
  • Ensuring successful adoption and transition of solutions to operational owners

Risk, Compliance, and Resilience

• Partner with Governance, Risk, and Compliance (GRC) teams to ensure risk‑based prioritization, policy alignment, and effective exception management.
• Support audits, certifications, and regulatory requirements through strong technical controls, evidence, and documentation.
• Define and validate security requirements for Business Continuity Planning (BCP), Business Impact Analysis (BIA), and Disaster Recovery (DR); partner with infrastructure and operations teams on testing and assurance activities.

Metrics, Accountability, and Outcomes

• Define, track, and report KPIs that demonstrate:
  • Delivery throughput and stakeholder adoption
  • Automation coverage and reduction of manual security processes
  • IAM posture (e.g., MFA coverage, privileged access reduction, lifecycle automation)
  • Reliability and quality of security platforms and services
  • Effectiveness of Zero Trust and data‑perimeter controls
  • Efficiency and risk reduction in supply‑chain security reviews

Required Skills and Experience:

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical field.
• 12+ years of experience in system, network, and/or application security, preferably within large‑scale or infrastructure‑centric organizations.
• Significant experience leading security engineering and IAM t