Senior AppSec Engineer

Responsibilities

• Conduct threat modeling exercises for applications, APIs, microservices, and AI/LLM-enabled capabilities
• Perform application security reviews and vulnerability assessments across the SDLC
• Triage and validate findings from SAST, DAST, SCA, IaC, and container security tools
• Partner with engineering teams to provide actionable remediation guidance and support risk-based decision making
• Drive adoption and optimization of AppSec tooling and automation across engineering teams
• Collaborate with developers, product managers, and architects to improve security awareness and maturity
• Mentor junior engineers and contribute to a culture of continuous learning

Requirements

• 5+ years of experience in application security, secure software development, or related security engineering roles
• Strong understanding of application security fundamentals including OWASP Top 10 and secure coding principles
• Proven expertise in conducting threat modeling and security architecture reviews
• Hands-on experience with AppSec tooling such as SAST, DAST, and SCA
• Familiarity with cloud-native application architectures and modern development practices
• Ability to communicate technical security risks clearly to both technical and leadership audiences

Preferred Qualifications

• Experience securing cloud environments in AWS, Azure, or GCP
• Familiarity with AI/GenAI application security concepts and frameworks (e.g., OWASP Top 10 for LLMs)
• Experience in SaaS environments or large-scale microservices architectures
• Familiarity with CI/CD pipelines and DevSecOps practices

Benefits

• Equity for all employees
• Flexible annual leave, paid holidays, and volunteer days
• Comprehensive private benefits plan including medical insurance for you and your family
• Life insurance (3x compensation) and personal accident insurance
• Fertility support and paid parental leave
• Employee Assistance Program

About the Company

Arctic Wolf is a leader in security operations, dedicated to the mission of ending cyber risk. We build award-winning technology, like the Aurora Platform, to protect organizations worldwide. We foster a collaborative, inclusive, and high-growth environment where smart teammates solve hard problems to deliver real outcomes for our customers.