Germany, Remote
About Arctic Wolf
Our Mission: To End Cyber Risk
Arctic Wolf is a cybersecurity company on a mission to help organizations turn cyber risk into business resilience. Powered by the Aurora® Platform, we combine AI-driven automation with the expertise of our security teams to deliver security operations that help customers stay ahead of evolving threats.
Today, cyber risk is one of the most significant business challenges organizations face. As attackers move faster and leverage AI to scale their efforts, traditional approaches to security are struggling to keep pace.
That's why we take a different approach. Our AI-native platform and Agentic SOC operate at machine speed, enabling organizations to adopt an operations-led security model that delivers faster time to value, measurable risk reduction, and stronger security outcomes.
At Arctic Wolf, we're not just responding to the future of cybersecurity, we're helping shape it.
We’re looking for a Aurora Endpoint Security Engineer 2 (m/f/d) to be a part of making this happen.
About the Role
As an Endpoint Security Engineer 2, you will:
What You’ll Bring:
About Arctic Wolf
At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2025), Best Places to Work – USA (2021-2025), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2024-2026), and Kununu Top Company – Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry.
Our Values
Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good.
We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.
We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, colour, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing [email protected]
All wolves receive compelling compensation and benefits packages, including:
Security Requirements
Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).
Background checks are required for this position.
This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”). Please note that, if applicable, an offer for employment will be conditioned on authorisation to receive software or technology controlled under these U.S. export control laws and regulations.
Ready for your next challenge? We look forward to receiving your CV and supporting documents.
The base salary range for this job family is 65,000 to 96,000 EUR annually. This range reflects the base pay the company reasonably expects to offer for this position, aligned to the broader job family base pay structure. Actual base pay may vary based on skills, experience, and location, including job family level. In addition to base pay, Arctic Wolf offers variable incentive compensation, new hire equity grants, and a comprehensive benefits package.Arctic Wolf provides continuous cybersecurity protection tailored to each organization. It uses a cloud-native platform paired with a dedicated concierge team to deliver around-the-clock monitoring and security operations (SOC) on a subscription basis. The platform integrates security functions to avoid tool sprawl and alert fatigue, while the concierge team works with clients to meet their specific needs. Clients pay for ongoing protection with 24x7 coverage, and Arctic Wolf offers tools like a Total Cost of Ownership Calculator to illustrate savings and ROI. This approach differentiates Arctic Wolf from competitors by combining a unified, cloud-based platform with a personalized delivery model that embeds security experts with each client. The goal is to improve clients’ security posture, reduce unnecessary security tool investments, and lower total costs while providing reliable, continuous monitoring.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
$899.2M
Headquarters
Eden Prairie, Minnesota
Founded
2012
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Arctic Wolf Named Best Security Vendor in CRN's Annual Best of the Channel Awards. CRN recognizes Arctic Wolf for advancing an industry-leading agentic security operations platform and delivering trusted security outcomes through the Aurora(R) Superintelligence Platform and Aurora Agentic SOC EDEN PRAIRIE, Minn. - October 14, 2026 - Arctic Wolf(R), the cybersecurity and AI company, today announced that it has been named 'Best Security Vendor of the Year' by... Arctic Wolf Named Best Security Vendor in CRN's Annual Best of the Channel Awards Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link - your enrollment helps support this platform at no extra cost to you. New & unread topics.
Inside Arctic Wolf and Anthropic's trust-first approach to the Agentic SOC. Arctic Wolf built trust into the foundation of the Aurora Agentic SOC. Learn how Arctic Wolf partner with Anthropic to include Claude models within its security operations platform. * In this article * Frontline Threats Demand Frontier Protection * Why Arctic Wolf Chose to Collaborate with Anthropic * Delivering Trust and Safety from the World's Largest Commercial Agentic SOC * A Collaboration That Will Keep Advancing In the recently released 2026 SANS AI in Cybersecurity Survey, nearly two out of three security professionals said they have been given AI-generated guidance that later turned out to be wrong. Not from an experimental tool off in a sandbox, but from systems built into the security stack they were told to rely on. Security teams should not have to live with that. They need to trust the systems that protect them, which is why trust had to be engineered into the foundation of its security operations platform and agentic security operations center (SOC), not bolted on afterward. Frontline Threats Demand Frontier Protection. In recent years, attackers have put AI to work at machine speed, automating reconnaissance, phishing, and exploit development at a pace human-led security teams were never built to match. Speed doesn't favor both sides equally. If an attacker's tool fails, or an AI-generated exploit produces an incorrect result, the cost to the attacker is close to zero. They try again. Defenders do not get that luxury. An AI agent that makes the wrong call inside an organization's environment, missing a real threat or acting on a false one, can mean damage to that business, and a win for the attacker. An agentic SOC that moves fast but gets it wrong only benefits attackers. Meeting frontline threats like these takes more than speed. It takes frontier protection, defenses built on AI capable enough to match the attacker and trustworthy enough to be allowed to act. Why Arctic Wolf Chose to Collaborate with Anthropic. That asymmetry is exactly why trust has to be core to what Arctic Wolf build, and why Arctic Wolf made the decision to collaborate with Anthropic to help Arctic Wolf achieve that. Their mission is to ensure the world safely navigates the transition through transformative AI, and for Arctic Wolf here at Arctic Wolf, safety and trustworthy AI are inseparable. That alignment, more than any single feature, is why working together made sense from the start. The first result of that collaboration was the Aurora Security Assistant, which Arctic Wolf unveiled at the RSA Conference in 2025. Built in part with Claude models, it gives customers natural language access to security insight uncovered by the Aurora Superintelligence Platform, helping them get faster answers to complex security questions via a simple, chat-based interface. Delivering Trust and Safety from the World's Largest Commercial Agentic SOC. Over the last 18 months, its collaboration has only deepened. Anthropic's Claude models now run throughout the Aurora Superintelligence Platform, including the agents within the Swarm of Experts, the agentic framework that executes key functions of its SOC. That framework now supports thousands of organizations worldwide and performs more than 200,000 security investigations a week, a scale that makes the Aurora Agentic SOC the largest commercial agentic SOC in the world. This week, at Arctic Wolf's annual Security Operations Summit, Arctic Wolf shared the stage with Ash Alhashim, Head of Enterprise Cybersecurity GTM, Anthropic, who spoke to just how far this collaboration has come. "Arctic Wolf's team knows security operations deeply, and that shows in how they've put Claude to work," he said from the stage. "We've learned a lot from working with them and we're glad to keep building together." Today, the Swarm of Experts in the Aurora Agentic SOC resolves more than 60% of its investigations autonomously, with high confidence. That level of unassisted resolution comes from technology Arctic Wolf has built, leveraging Anthropic's models as part of the foundation. The same technology has also helped customers resolve cases 26% faster year over year, which means they are not just getting faster answers but better ones. The occurs because Swarm of Experts draws on real investigations across its entire customer base and on each customer's own unique environment, so the guidance behind every investigation is tailored to their needs. Its work together also extends to Anthropic's Cyber Verification Program, which gives vetted security teams access to Anthropic's most capable models with reduced blocking classifiers for legitimate cyber work. Arctic Wolf is part of the program and has access at the Defense Access tier, which is built for defensive work such as security operations center and incident response tasks. It is another sign of the trust between its teams, and it helps ensure the models behind the Aurora Agentic SOC can support the demands of real defensive work. A Collaboration That Will Keep Advancing. In under two years, Arctic Wolf and Anthropic have made incredible strides in advancing agentic security operations together. What began as a single AI security assistant has grown into the reasoning layer behind the world's largest commercial agentic SOC, delivering faster, more accurate outcomes for thousands of customers around the globe each week. But the best is yet to come. Arctic Wolf and Anthropic will continue to work together to find new ways to build Claude's capabilities into the Aurora Superintelligence Platform and deliver new innovations, as both the threats and the SOCs built to stop them keep moving at machine speed.
Arctic Wolf and Veeam partner to bring backup intelligence into Security Operations. New joint integration extends visibility into critical backup infrastructure, helping organizations detect threats faster, investigate incidents more effectively, and strengthen cyber resilience. EDEN PRAIRIE, Minn., Oct. 15, 2026 (GLOBE NEWSWIRE) - Arctic Wolf(R), the cybersecurity and AI company, today announced a strategic partnership with Veeam, the Data and AI Trust Company, to bring backup and recovery intelligence into the Aurora(R) Superintelligence Platform, Arctic Wolf's AI-native security operations platform, helping organizations strengthen security and improve cyber resilience. By integrating Veeam Data Platform events with the Arctic Wolf Aurora Superintelligence Platform and the Aurora Agentic SOC, organizations can extend visibility into critical backup infrastructure, reduce security blind spots, and improve their ability to detect, investigate, and respond to cyber threats. As organizations face increasingly sophisticated cyber threats, with AI accelerating both the speed and scale of attacks, backup and recovery environments have become attractive targets for attackers seeking to disrupt operations and increase the impact of an incident. At the same time, growing volumes of security data and limited resources make it harder for security teams to identify the threats that matter most and understand their potential business impact. For many organizations, these risks have already become reality. Arctic Wolf's 2026 AI & Cybersecurity Trends Report found that 63% of surveyed organizations experienced a significant cybersecurity incident in the past year. In those moments, recovery systems become critical to restoring operations and maintaining business continuity. Yet when backup activity remains siloed from broader security operations, analysts often lack the context needed to quickly assess suspicious activity, understand the scope of an attack, and support recovery efforts. To address this challenge, Veeam security and operational events flow into the Aurora Superintelligence Platform, where Arctic Wolf analyzes them alongside more than 10 trillion security events processed each week across customer environments. Arctic Wolf monitors key backup and recovery activity, including malware detections, suspicious user behavior, unauthorized restore attempts, failed backup operations, and administrative changes. By applying targeted detections to these signals, Arctic Wolf helps identify meaningful threats and provide security teams with greater visibility into critical recovery infrastructure. "Organizations depend on their recovery environments to maintain business continuity when an incident happens, making visibility into those systems critical for cyber resilience," said Dan Schiappa, President, Technology and Services at Arctic Wolf. "In the age of AI, security teams don't need more alerts. They need context to understand what matters and how to respond. By bringing Veeam backup intelligence into the Aurora Superintelligence Platform, we're helping customers gain a more complete view of their environment, accelerate investigations, and strengthen the resilience outcomes that matter most to their business." For existing Veeam(R) Software customers using Arctic Wolf, the partnership adds managed security operations to one of the most critical components of their resilience strategy. Organizations can continue to leverage Veeam's immutable backups, recovery capabilities, and backup integrity verification while gaining additional visibility, threat monitoring, expert investigation, and security context from Arctic Wolf. "Data and AI trust requires security and resilience to operate as one connected discipline," said Michelle Graff, Senior Vice President for Global Partners and Channel at Veeam. "By bringing Veeam signals into Arctic Wolf's security operations platform, we are giving organizations greater visibility into threats affecting their critical data and recovery environments. This partnership helps customers strengthen the trusted, secure, and resilient data foundation they need to maintain business continuity and safely accelerate AI at scale." The partnership builds on the shared commitment of Arctic Wolf and Veeam to help organizations strengthen cyber resilience through greater visibility and coordination across security and recovery environments. The companies plan to further connect security operations and data resilience, bringing exposure management, detection and response, and recovery workflows closer together to help organizations make better security decisions and improve business resilience. About Arctic Wolf Arctic Wolf is the cybersecurity and AI company that ends cyber risk by transforming it into business resilience. Powered by the Aurora(R) Superintelligence Platform, Arctic Wolf delivers modern security operations built on proprietary AI and decades of real-world expertise. By combining AI-driven automation with expert-validated precision, Arctic Wolf helps organizations confidently manage cyber risk, so they can operate with control and the freedom to innovate. To learn more about Arctic Wolf, visit www.arcticwolf.com. Media Contact Oliver Cowley Manager, Corporate Communications at Arctic Wolf [email protected] (C) 2026 Arctic Wolf Networks, Inc. All Rights Reserved. Arctic Wolf, Aurora, Alpha AI, Arctic Wolf Security Operations Cloud, Arctic Wolf Managed Detection and Response, Arctic Wolf Managed Risk, Arctic Wolf Managed Security Awareness, Arctic Wolf Incident Response, and Arctic Wolf Concierge Security Team are either trademarks or registered trademarks of Arctic Wolf Networks, Inc. Disclaimer: This press release may include forward-looking statements. These reflect its current views and are subject to change. They are not guarantees, and actual results may vary. Integration announcements reference third-party technologies. Arctic Wolf does not claim ownership of partner technologies and functionality is subject to partner product capabilities.
Arctic Wolf launches Aurora Adaptive Threat Protection. 15 Oct 2026 Quick Read Summary is AI-generated, newsdesk-reviewed * Arctic Wolf launched Aurora Adaptive Threat Protection, an AI-powered endpoint security solution, at 2026 summit. * Intent-based detection analyzes endpoint activity to disrupt and roll back ransomware and credential theft earlier. * Exclusive beta availability; complements existing EPP and EDR tools with minimal performance impact. Arctic Wolf introduced Aurora Adaptive Threat Protection at its 2026 Security Operations Summit, describing it as an endpoint security solution designed to detect and disrupt ransomware, credential theft and other evasive attacks earlier in the attack chain. The company says the product uses AI-powered, intent-based analysis to identify malicious activity and can reverse attacks before they cause significant damage. The solution is designed to run alongside existing endpoint protection (EPP) and endpoint detection and response (EDR) tools, including third-party products and Aurora Endpoint Security. Arctic Wolf says organizations can add it without replacing their current endpoint security platforms. Detecting malicious intent earlier. Rather than relying on individual indicators of compromise, Aurora Adaptive Threat Protection analyzes how processes and events unfold across an endpoint. It looks for patterns in which actions that may initially seem legitimate begin to point toward a malicious outcome. The company says this approach can enable the solution to interrupt and roll back attacks before they fully develop. Aurora Adaptive Threat Protection analyzes how processes and events unfold across an endpoint The launch comes as attackers increasingly use compromised credentials, trusted tools and gradual techniques to blend into routine business activity. Arctic Wolf says ransomware accounted for 44% of its incident response engagements in the last year. It also cites an estimate that credential-harvesting malware collected 1.7 billion credentials from 7.4 million infected devices. As AI helps attackers automate reconnaissance, accelerate intrusions and scale campaigns, security teams face pressure to identify threats earlier. Gartner(R) recently noted, "To stay ahead of AI-augmented attacks, enterprises are increasingly moving beyond reactive monitoring toward preemptive controls, specifically capabilities that can deny, deceive, and disrupt adversaries." How the endpoint security solution works. Aurora Adaptive Threat Protection builds a causal graph of endpoint activity, including processes, files, registry activity and API calls. By retaining context over time, it can assess how events are connected and look for attacker intent even when individual actions appear benign. The product also uses agentic workflows and a custom-trained small language model to evaluate activity and distinguish normal business operations from emerging threats. When it confirms malicious intent, Arctic Wolf says the solution can automatically stop the activity and reverse the attack chain, with the aim of reducing recovery time and manual remediation. "Attackers often don't need malware to cause damage. They can use legitimate tools, trusted credentials, and AI-driven automation to hide in plain sight, all at machine speed," said Dan Schiappa, President of Technology and Services at Arctic Wolf. "That's why endpoint security needs to evolve. Endpoint detection and response does rich detection well, but that work needs to happen earlier. Aurora Adaptive Threat Protection shifts the mindset from a purely detection and response approach to a more preemptive approach, identifying malicious intent and disrupting threats earlier in the attack chain." Designed to complement existing tools. Arctic Wolf says the solution provides visibility into the history of endpoint activity Arctic Wolf says the solution provides visibility into the history of endpoint activity, helping security teams connect events that may otherwise appear unrelated. It is designed to roll back malicious activity to help restore normal business operations and to operate without materially affecting endpoint performance, memory or CPU use. The company also says earlier intervention and rollback can reduce the administrative work involved in response and remediation. Aurora Adaptive Threat Protection is backed by the Aurora Superintelligence Platform, which processes more than 10 trillion security events each week across more than 11,000 customers. Arctic Wolf says the service combines AI-driven analysis with its security operations platform and is intended to complement existing endpoint solutions, with human oversight and validation. Aurora Adaptive Threat Protection is now available in an exclusive beta for Arctic Wolf customers. Enrollment for organizations interested in participating opens today.
Arctic Wolf has launched Aurora Adaptive Threat Protection, an endpoint security product that uses AI to spot and stop attacks earlier. The company unveiled it on October 14, 2026, at its Security Operations Summit. The tool maps endpoint activity to detect malicious intent, even when individual actions look harmless. It can interrupt an attack and roll back its effects. It runs alongside existing endpoint protection and detection tools, so customers need not replace them. Arctic Wolf says ransomware made up 44% of its incident response engagements in the past year. It is backed by a platform that processes more than 10 trillion security events a week across more than 11,000 customers. The product is now in exclusive beta for Arctic Wolf customers.