Senior Application Security Manager, Arctic Wolf

• Able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect to all levels of the business – junior individual contributor through VP
• Able to effectively partner and communicate with Engineering and Product teams
• Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and doesn't stop at the first answers
• Generate new and unique ideas to enable secure software development; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings
• A Bachelor’s degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience
• 5+ years of experience in security or infrastructure engineering, including assessing and escalating to vendors for troubleshooting purposes
• Experience with and thorough understanding of modern software development practices including a thorough understanding of OWASP Top 10, OWASP ASVS, or similar frameworks
• Experience deploying application security technologies such as SAST, DAST, IAST, SCA, etc, and enabling development teams’ successful adoption
• Experience with Responsible Disclosure and bug bounty programs
• Good understanding of Mitre’s CVE and CAN programs

Desirable

• Our mission is simple: End Cyber Risk. We’re looking for a Senior Manager, Application Security to be a part of making this happen
• This role will manage the Application Security team and collaborate closely with the Research and Development team to ensure secure code development and protect critical software components
• The Manager of Application Security will contribute to our Product Security department by leading initiatives that implement and operationalize technical security capabilities across Arctic Wolf’s software systems and applications
• Manage, lead, mentor, and coach the Application Security team and the teams they oversee, enabling the teams to consistently accomplish their objectives to quickly deliver secure software in a distributed environment
• Work with Engineering teams to define and implement the Arctic Wolf Secure SDLC, ensuring code is secure by design, secure by default, secure in deployment and communication, and automated with a multiyear roadmap
• Provide recommendations on Information Security policies and defining governance procedures for secure application development
• Implement application security tools, processes, procedures and documentation to support alignment with OWASP Top 10, Industry Standards, Current Events, compliance obligations, and Best-Practices
• Educate developers, architects, code reviewers, and others on secure coding practices and other aspects of secure software development
• Serve as the subject matter expert for Application Security, providing guidance to Team Members, Engineering and Product teams performing security reviews and assessments
• Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and vulnerability management
• Help software development teams understand and remediate security findings within prescribed timelines
• Has experience researching and reviewing application vulnerabilities identified in both first- and third-party libraries and source code
• Manage the implementation, integration, configuration, and training/documentation of off-the-shelf application security technologies in the Arctic Wolf internal environment
• Lead Arctic Wolf’s Vulnerability response program, including building a bug bounty program. Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth
• Gather and create Application Security performance indicators to
• Drive delivery and program improvements