Lead Application Security Engineer

At Arctic Wolf were redefining the cybersecurity landscape. With our employee Pack members spread out globally committed to setting new industry standards. Our accomplishments speak for themselves from our recognition in theForbes Cloud 100CNBC Disruptor 50Fortune Future 50 andFortune Cyber 60to winning the2024 CRN Products of the Yearaward. Were proud to be named aLeaderin theIDC MarketScapefor Worldwide Managed Detection and Response Services and earning aCustomers Choicedistinction fromGartner Peer Insights. OurAurora Platformalso receivedCRNs Products of the Yearaward in the inauguralSecurity Operations Platformcategory. Join a company thats not only leading but also shaping the future of security operations.

Our mission is simple: End Cyber Risk. Were looking for a Managed Awareness Manager to be part of making this happen.

Arctic Wolf seeks a Lead Application Security Engineer to guide secure-by-design practices

across our cloud SaaS and AI-enabled this role you will lead threat modeling

define application security standards assess product and platform architectures and integrate

security throughout the SDLC. This includes securing emerging AI and GenAI capabilities using

frameworks such as the OWASP Top 10 and OWASP Top 10 for LLMs.

The role requires deep technical expertise strong communication skills and the ability to lead

cross-functional initiatives. You will own and drive multiple AppSec programs reduce risk

shape internal security practices and coach engineers and Security Champions to raise the

overall security maturity of the organization.

What Youll Do

Lead Threat modeling exercises for cloud microservices APIs and AI/LLM-enabled systems

Define reusable security patterns and drive secure design reviews for product and platform architectures

Own AppSec initiatives end-to-end and drive risk-reduction programs across R&D

Influence engineering and product leaders to adopt secure practices through clear guidance and rationale

Conduct security assessments for new features cloud architectures and AI/GenAI capabilities

Implement and optimize AppSec tooling including SAST DAST IAST SCA IaC scanning and container security

Establish metrics dashboards and scalable process improvements

Drive R&D wide security practices and help shape internal standards for secure

development

Explore emerging technologies and promote continuous learning within AppSec and the Security Champions community

What Were Looking For

A bachelors degree in computer science Information Systems Engineering

Cybersecurity or related technical field; or equivalent experience.

8 years of experience in application security or secure software development

Expertise in OWASP Top 10 ASVS and OWASP Top 10 for LLMs and GenAI systems

Strong experience leading threat modelling and security architecture reviews

Hands-on experience with AppSec tooling including SAST DAST SCA and cloud-native security tools

Experience guiding risk discussions and driving adoption of secure practices

Key Competencies

Communicates clearly across technical and executive audiences

Excels at analytical thinking and identifying innovative solutions

Influences teams through collaboration and sound reasoning

Able to lead programs drive measurable improvements and shape internal standards

Promotes continuous learning and elevates the security capabilities of others

Preferred Qualifications

Familiarity with secure cloud architecture across AWS Azure or GCP

Certifications such as CISSP CCSP CSSLP OSWE OSCP GPEN GWAPT or similar

Experience in large-scale SaaS environments or regulated industries

Location and Travel

Our teams are diverse including our geographical locations. However our team has chosen to operate in the Indian Time Zone (GMT 5:30). The management role does require occasional check ins in other time zones.
We operate in a hybrid model where some employees work from their home offices others in-office and some a combination of both. All employees within a 30 mile (48 km) radius of an Arctic Wolf office must be present in office 3 days a week. Please ask for specific location requirements during your interview.
Quarterly planning sessions may be conducted in-person requiring travel to Bangalore Karnataka India. Ad-hoc infrequent travel (estimate 10%) may be required

Why Arctic Wolf

At Arctic Wolf we foster a collaborative and inclusive work environment that thrives on diversity of thought background and culture. This is reflected in our multiple awards includingTop Workplace USA(2021-2024)Best Places to Work USA(2021-2024)Great Place to Work Canada(2021-2024)Great Place to Work UK(2024) andKununu Top Company Germany(2024). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction with over 7000 customers worldwide and more than 2000 channel partners globally. As we continue to expand globally and enhance our technology Arctic Wolf remains the most trusted name in the industry.

Our Values

Arctic Wolf recognizes that success comes from delighting our customers so we work together to ensure that happens every day. We believe in diversity and inclusion and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate thatby protecting peoples and organizations sensitive data and seeking to end cyber risk we get to work in an industry that is fundamental to the greater good.
We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unityhere.
We also believe and practice corporate responsibility and have recently joined the Pledge 1% Movement ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.
All wolves receive compelling compensation and benefits packages including:
Equity for all employees
Flexible annual leave paid holidays and volunteer days
Training and career development programs
Comprehensive private benefits plan including medical insurance for you and your family life insurance (3x compensation) and personal accident insurance.
Fertility support and paid parental leave
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race color religion sex orientation national origin age disability genetics or any other basis forbidden under federal provincial or local law. Arctic Wolf is committed to fostering a welcoming accessible respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such we strive to make our entireemployeeexperience as accessible as possible and provideaccommodationsas required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing

.

On-Camera Policy

To support a fair transparent and engaging interview experience candidates interviewing remotely are expected to be on camera during all video interviews.
Being on camera fosters authentic connection improves communication and allows for full engagement from both candidates and interviewers.
We understand that technical bandwidth or location-related challenges may occasionally prevent video use. If this applies candidates are required to notify us in advance so we can explore appropriate accommodations.

Security Requirements

Conducts duties and responsibilities in accordance with AWNs Information Security policies standards processes and controls to protect the confidentiality integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).
Background checks are required for this position.
This position may require access to information protected under U.S. export control laws and regulations including the Export Administration Regulations (EAR). Please note that if applicable an offer for employment will be conditioned on authorization to receive software or technology controlled under these laws and regulations(edited)