Principal Application Security Engineer
Barracuda Networks, Inc.8 days ago
Ann Arbor, MI, USAStaff+
Responsibilities
- Shape, grow, and lead Barracuda’s Application Security and Product Security programs.
- Embed security across the development lifecycle and transition organizations toward proactive, guardrail-driven practices.
- Facilitate feature-level threat modeling and risk-based security discussions across varied technology stacks and product designs.
- Perform application penetration tests, security-focused source code reviews, risk rating, and vulnerability management.
- Own and execute long-term security initiatives, workstreams, and impactful project scopes.
- Build automation and leverage AI to support daily security tasks.
- Provide practical remediation guidance, lead design review discussions and security trainings, and partner with product, platform, and engineering leaders.
- Mentor AppSec team members and help shape the broader security program and initiatives.
Requirements
- 8–10+ years of product-focused Application Security experience.
- Deep practical knowledge of Application Security, Product Security, and Cloud security concepts.
- Experience building or growing modern AppSec and ProdSec programs in a product environment.
- Proven experience owning initiatives or workstreams over an extended period, including year-plus scopes.
- Proficiency in threat modeling, application penetration testing, security-focused source code review, risk rating, and vulnerability management.
- Proficiency in at least two programming languages, such as TypeScript/JavaScript, Python, Ruby, Java, or Go.
- Ability to provide framework-specific remediation guidance and developer-friendly security recommendations.
- Strong communication, presentation, cross-functional collaboration, and leadership skills.
- Preferred experience building production-grade software and working with technical and non-technical teams.
- Preferred certifications include OSCP, OSCE, or OSWE.
- Previous management or leadership experience is preferred.
Benefits
- Equity in the form of non-qualifying options.
- High-quality health benefits.
- Retirement plan with employer match.
- Career-growth opportunities and internal mobility, including cross-training.
- Flexible Time Off and Paid Time Off benefits.
- Volunteer opportunities.
- Hybrid work arrangement, as indicated by #LI-Hybrid.
Tech Stack
Categories