Senior AppSec Engineer

At Arctic Wolf, you won’t just watch the cybersecurity industry evolve – you'll help lead the change. Our global Pack is made up of people who thrive on solving hard problems, moving fast, and building technology that protects organizations around the world. We’re proud to be recognized by Forbes, CNBC, Fortune, CRN, Gartner Peer Insights and IDC MarketScape – but what matters most is the work behind it: delivering real outcomes for customers through award winning innovation like our Aurora Platform. If you’re looking for meaningful work, smart teammates and the chance to make a real impact in a high-growth company that’s redefining security operations, Arctic Wolf is the right place for you! Our mission is simple: End Cyber Risk. We’re looking for a Senior AppSec Engineer to be part of making this happen. Position Overview and Objective At Arctic Wolf, we are transforming our Application Security function to be AI-first, fundamentally changing how security work is executed and scaled across the organization. We are seeking a Senior Application Security Engineer to help scale secure-by-design practices across our cloud, SaaS, and AI-enabled platforms. In this role, you will partner closely with engineering teams to identify, assess, and reduce application security risk throughout the software development lifecycle. You will independently execute threat modeling activities, perform security assessments, triage vulnerabilities, and provide actionable remediation guidance to development teams. You will also contribute to improving AppSec processes, tooling, and standards while helping strengthen the organization’s overall security posture. Responsibilities You will excel in this role if you are: Conduct threat modeling exercises for applications, APIs, microservices, and AI/LLM-enabled capabilities Perform application security reviews and vulnerability assessments across the SDLC Triage and validate findings from SAST, DAST, SCA, IaC, container, and other AppSec security tools Partner with engineering teams to provide clear, actionable remediation guidance and support risk-based decision making Support secure development practices by identifying opportunities for process, tooling, and workflow improvements Contribute to the refinement of security standards, SOPs, playbooks, and reusable security guidance Help drive adoption and optimization of AppSec tooling and automation across engineering teams Collaborate with developers, product managers, architects, and Security Champions to improve security awareness and maturity Mentor junior engineers, interns, or peers and contribute to a culture of continuous learning Stay current on emerging application security risks, attack techniques, vulnerabilities, and industry best practices Experience and Requirements 5+ years of experience in application security, secure software development, or related security engineering roles Strong understanding of application security fundamentals including OWASP Top 10, secure coding principles, and common attack patterns Experience conducting threat modelling and security architecture reviews Hands-on experience with AppSec tooling such as SAST, DAST, SCA and vulnerability management platforms Experience validating and triaging security findings and working directly with engineering teams on remediation Familiarity with cloud-native application architectures and modern development practices Ability to communicate technical security risks and recommendations clearly to developers, product managers, and leadership audiences Strong analytical and problem-solving skills with the ability to identify root causes and propose practical solutions Ability to independently manage multiple priorities and drive deliverables to completion Preferred Qualifications Experience securing cloud environments in AWS, Azure, or GCP Familiarity with AI/GenAI application security concepts and frameworks such as the OWASP Top 10 for LLMs Experience in SaaS environments, microservices architectures, or large-scale engineering organizations Familiarity with CI/CD pipelines and DevSecOps practices On-Camera Policy To support a fair, transparent, and engaging interview experience, candidates interviewing remotely are expected to be on camera during all video interviews. Being on camera fosters authentic connection, improves communication, and allows for full engagement from both candidates and interviewers. We understand that technical, bandwidth, or location-related challenges may occasionally prevent video use. If this applies, candidates are required to notify us in advance so we can explore appropriate accommodations. About Arctic Wolf At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2025), Best Places to Work – USA (2021-2025), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2024-2026), and Kununu Top Company – Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry. Our Values Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here . We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. All India wolves receive compelling compensation and benefits packages, including: Equity for all employees Flexible annual leave, paid holidays and volunteer days Comprehensive private benefits plan including medical insurance for you and your family, life insurance (3x compensation), and personal accident insurance. Fertility support and paid parental leave Employee Assistance Program Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodation by emailing . View our Hiring Page to learn more about our application process. Security Requirements Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes, and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies). Background checks are required for this position. This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”). Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.