Job Summary

At Arctic Wolf, you won't just watch the cybersecurity industry evolve - you will help lead the change. Our global Pack is made up of people who thrive on solving hard problems, moving rapid, and building technology that protects organizations around the world. We're proud to be recognized by Forbes, CNBC, Fortune, CRN, Gartner Peer Insights and IDC MarketScape - but what matters most is the work behind it: delivering real outcomes for customers through award winning innovation like our Aurora Platform.

If you're looking for meaningful work, smart teammates and the chance to make a real impact in a high-growth company that's redefining security operations, Arctic Wolf is the right place for you!

Our mission is simple: End Cyber Risk. We're looking for a Staff Security Content Integrations Developer to be part of making this happen.

The Staff Security Content Integrations Developer will contribute to our Aurora Exposure Management team by leading security research, vulnerability detection development, security content engineering, and third-party integrations that continuously improve the coverage and effectiveness of Arctic Wolf's Exposure Management portfolio. This role combines cybersecurity research and software development, with a strong focus on identifying vulnerabilities and misconfigurations, developing detection content, building integrations with external platforms and services, and delivering scalable security capabilities for Arctic Wolf customers.

Responsibilities

- Apply a security research first mindset to identify vulnerabilities, system misconfigurations, and exposure risks and translate research into effective detection capabilities.
- Lead and contribute to the development of security content that continuously improves vulnerability and exposure coverage, detection efficiency, and customer outcomes.
- Research, design, develop, test, and maintain security detection programs for vulnerabilities and system misconfigurations across a broad range of asset types and technologies.
- Design and develop plugins and integrations with public application programming interfaces from enterprise vendors to enable push and pull based data sharing and enhance security coverage.
- Build well-designed, testable, efficient, and secure vulnerability and misconfiguration detection code across multiple products and security technologies.




- Develop host based vulnerability detection content using technologies such as Open Vulnerability Assessment Language definitions, Network Assessment and Security Language scripts, and Notus.
- Develop network based vulnerability tests and create and publish attack path and exposure related queries using vulnerability intelligence and related security data.
- Develop configuration benchmark automation, including Center for Internet Security Benchmark related content, and contribute to pipeline hardening checks and security policy development.
- Develop automation and enrichment workflows using scripting languages such as Python and participate in incident management and on-call rotations to safeguard and monitor services.
- Partner closely with Exposure Management Product, Triage, Security Services, and other operational teams to operationalize intelligence into detection, triage, and response workflows.
- Leverage artificial intelligence powered development tools, including code assistants, artificial intelligence augmented debugging, and automated testing, as part of the development workflow to accelerate delivery and improve code quality.

Requirements

- Security Research Engineering with a strong emphasis on vulnerability identification, vulnerability detection, misconfiguration detection, and security content development.
- Conducting security research and developing detection and identification capabilities using methodologies and frameworks such as the Open Worldwide Application Security Project Top 10, MITRE ATTCK Framework, and Center for Internet Security Benchmarks.
- Designing, writing, testing, and maintaining vulnerability detection content using technologies such as Network Assessment and Security Language, Notus, Open Vulnerability Assessment Language, and Derived Exposures.
- Strong programming experience in at least one backend or scripting language such as Python, Go, Rust, or Bash.
- Experience working with at least one relational or non-relational database, such as PostgreSQL or MongoDB,



and understanding of data modeling and query development.
- Experience with cloud environments such as Amazon Web Services, container technologies such as Docker and Kubernetes, and Infrastructure as Code.
- Strong understanding and application of secure software development practices and Security Development Operations methods.
- Deep operational knowledge of network infrastructure protocols such as HTTP, SSH, SMB, SNMP, and TLS/SSL, as well as operating system internals including the Windows Registry and Linux file systems.
- Strong ability to independently research complex security problems, develop detection solutions, and collaborate with cross-functional teams.

Nice to Have

- Experience with third-party vulnerability management platforms such as Qualys, Nessus, Rapid7, or OpenVAS.
- Experience with cloud based configuration and security posture management tools such as Azure Security Center, AWS Security Hub, Sonrai, CloudSploit, or Prisma Cloud.
- Experience with open source vulnerability assessment and penetration testing platforms such as Nmap, OpenVAS, Burp Suite, or Metasploit.
- Experience with information technology deployment and configuration automation tools such as Salt or Ansible.
- Experience developing security content for large scale security platforms or exposure management products.
- Experience mentoring engineers or acting as a technical lead on security research and detection engineering initiatives.

Don't meet all the requirements? That's okay! We still want you to apply. We have many opportunities, and we are always looking for top talent.

On-Camera Policy

To support a fair, transparent, and engaging interview experience, candidates interviewing remotely are expected to be on camera during all video interviews. Being on camera fosters authentic connection, improves communication, and allows for full engagement from both candidates and interviewers. We understand that technical, bandwidth, or location-related challenges may occasionally prevent video use. If this applies, candidates are required to notify us in advance so we can explore appropriate accommodations.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Staff Developer (Bengaluru)
🏢 Arctic Wolf Networks
📍 Bengaluru