Senior Application Security Engineer, Arctic Wolf

• A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience
• 5+ years of experience in software development within a large organization, preferable in a SaaS environment. ORA thorough understanding of modern software development practices
• Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation
• Experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc

Desirable

• Our mission is simple: End Cyber Risk. We’re looking for Senior Application Security Engineer​ to be a part of making this happen
• The Senior Application Security Engineer role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components
• This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team
• Develop secure coding & secure design principles
• Train developers, architects, code reviewers, and others on secure coding practices
• Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams
• Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and
• Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication
• Help software development teams to understand and remediate security findings within prescribed timelines
• Research and review any reported or suspected application vulnerabilities from third party library and source code
• Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment
• Create technical approaches to implementing application security control technologies. Perform risk assessments of identified vulnerabilities and mitigations
• Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth
• Mentors and coaches team members to further develop competencies
• Assist in developing security related libraries and tools to enhance security efforts within the team and organization
• Automate metrics delivery and improvements to team processes
• The ability to effectively partner and communicate with Engineering and Product teams
• KEY COMPETENCIES:
• Able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect
• Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and doesn't stop at the first answers
• Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings