Senior Manager- Application Security

About the Role Senior Manager - Application Security will lead a team of Application Security engineers and drive the adoption of secure development practices across Arctic Wolf's software lifecycle. You will partner with engineering and product leadership to manage risk and embed security throughout the SDLC, shaping the AppSec program and delivering measurable security outcomes at scale.

What You'll Do

• Lead and develop a team of Application Security engineers, providing technical guidance, mentorship, and career development.
• Collaborate with senior leadership to define strategic priorities for the AppSec program and lead execution against the program roadmap.
• Translate AppSec strategy into actionable initiatives, team objectives, and measurable outcomes through roadmaps, OKRs, and operational metrics.
• Oversee threat modeling efforts and ensure security risks are identified and addressed early in the development lifecycle.
• Drive the continuous improvement of application security testing capabilities, including SAST, DAST, SCA, secrets detection, and emerging security testing technologies.
• Support the secure adoption of emerging technologies, including AI and GenAI-enabled applications.
• Lead and grow the Security Champions program, enabling engineers across the organization to serve as security advocates and help scale security ownership within development teams.
• Partner with engineering and product leadership to make risk-informed security decisions aligned with business priorities.
• Define and track metrics to measure program effectiveness, security outcomes, and engineering adoption.

What We're Looking For

• 12+ years of experience in Application Security, Product Security, Software Engineering, or related security engineering roles.
• 3+ years of experience leading security engineers, technical programs, or Application Security initiatives.
• Strong foundation in secure software design, threat modeling, security architecture reviews, and vulnerability management.
• Experience building and scaling Application Security programs within modern software development organizations.
• Experience deploying security testing technologies including SAST, DAST, SCA, container security, secrets detection, and cloud-native security tools.
• Ability to assess and prioritize risk in modern application architectures, including cloud-native environments.
• Effective communicator who can engage technical and non-technical stakeholders at all levels of the organization.
• Experience defining program metrics and driving measurable improvements in security outcomes.

Nice to Have

• Experience integrating security into CI/CD pipelines and developer platforms at scale.
• Experience with Responsible Disclosure and Bug Bounty programs.
• Experience securing cloud-native applications and architectures in AWS, Azure, or GCP.
• Familiarity with AI and GenAI security concepts, including the OWASP Top 10 for LLM Applications and secure AI development practices.