Manager, Application Security

At Arctic Wolf, we’re not just navigating the cybersecurity landscape – we’re redefining it. Our global team of dedicated Pack members is driving innovation and setting new industry standards every day. Our impact speaks for itself: we’ve earned recognition on the Forbes Cloud 100, CNBC Disruptor 50, Fortune Future 50, and Fortune Cyber 60 lists, and we recently took home the 2024 CRN Products of the Year award. We’re proud to be named a Leader in the IDC MarketScape for Worldwide Managed Detection and Response Services and earning a Customers’ Choice distinction from Gartner Peer Insights. Our Aurora Platform also received CRN’s Products of the Year award in the inaugural Security Operations Platform category. Join a company that’s not only leading, but also shaping, the future of security operations.

Our mission is simple: End Cyber Risk. We’re looking for a Manager, Application Security to be a part of making this happen.

The Manager of Application Security will contribute to our Product Security department by leading initiatives that implement and operationalize technical security capabilities across Arctic Wolf’s software systems and applications. This role will manage the Application Security team and collaborate closely with the Research and Development team to ensure secure code development and protect critical software components.

AS A MANAGER APPLICATION SECURITY AT ARCTIC WOLF, YOU WILL

• Manage, lead, mentor, and coach the Application Security team and the teams they oversee, enabling the teams to consistently accomplish their objectives to quickly deliver secure software in a distributed environment.
• Work with Engineering teams to define and implement the Arctic Wolf Secure SDLC, ensuring code is secure by design, secure by default, secure in deployment and communication, and automated with a multiyear roadmap.
• Provide recommendations on Information Security policies and defining governance procedures for secure application development.
• Implement application security tools, processes, procedures and documentation to support alignment with OWASP Top 10, Industry Standards, Current Events, compliance obligations, and Best-Practices.
• Educate developers, architects, code reviewers, and others on secure coding practices and other aspects of secure software development.
• Serve as the subject matter expert for Application Security, providing guidance to Team Members, Engineering and Product teams performing security reviews and assessments.
• Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and vulnerability management.
• Help software development teams understand and remediate security findings within prescribed timelines.
• Has experience researching and reviewing application vulnerabilities identified in both first- and third-party libraries and source code.
• Manage the implementation, integration, configuration, and training/documentation of off-the-shelf application security technologies in the Arctic Wolf internal environment.
• Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.
• Gather and create Application Security performance indicators to drive delivery and program improvements.

WE’RE LOOKING FOR SOMEONE WITH EXPERIENCE IN:

• Able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect to all levels of the business – junior individual contributor through VP.
• Able to effectively partner and communicate with Engineering and Product teams.
• Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and doesn’t stop at the first answers.
• Generate new and unique ideas to enable secure software development; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.

Minimum Qualifications

• A Bachelor’s degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.
• 5+ years of experience in security or infrastructure engineering, including assessing and escalating to vendors for troubleshooting purposes.
• Experience with and thorough understanding of modern software development practices including a thorough understanding of OWASP Top 10, OWASP ASVS, or similar frameworks.
• Experience deploying application security technologies such as SAST, DAST, IAST, SCA, etc, and enabling development teams’ successful adoption.

Preferred Qualifications

• Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.
• Familiarity with containerization technologies such as Docker and/or Kubernetes is a huge plus.
• Analytical and quantitative skills with proven experience in developing strategic solutions.
• Significant prior experience securing large-scale SaaS applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws.
• Experience working in a regulated environment (SOX, ISO 27001, etc) and/or one or more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc).
• Experience in people or project management with successful completion of multiple security projects

About Arctic Wolf

At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2024), Best Places to Work – USA (2021-2024), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2024), and Kununu Top Company – Germany (2024). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 7,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry.

Our Values

Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good.

We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.

We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.

All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees
• Flexible time off and paid volunteer days
• RRSP and 401k match
• Training and career development programs
• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
• Robust Employee Assistance Program (EAP) with mental health services
• Fertility support and paid parental leave

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing recruiting@arcticwolf.com.

Security Requirements

• Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).
• Background checks are required for this position.
• This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”). Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.

Read Full Description