Senior Application Security Engineer
Barracuda Networks, Inc.2 hours ago
Ottawa, CanadaSenior / Staff+
Responsibilities
- Embed security across the software development lifecycle through automation and developer enablement.
- Facilitate feature-level threat models and risk-based security discussions.
- Perform hands-on application penetration tests and security-focused source code reviews.
- Drive risk rating and vulnerability management processes.
- Partner with product, platform, and engineering leads on security initiatives.
- Lead design review discussions and security training.
- Provide framework-specific remediation guidance to developers.
Requirements
- Require 5–8+ years of product-focused application security experience with a record of embedding security and reducing late-stage findings.
- Require practical knowledge of authentication and authorization, session management, input/output handling, logging, data protection, and access controls.
- Require proficiency in at least two programming languages, including TypeScript/JavaScript, Python, Ruby, Java, or Go.
- Require hands-on application penetration testing and code review experience.
- Require proficiency in threat modeling and risk-based analysis.
- Require strong organizational, time-management, communication, and presentation skills.
Benefits
- Offer equity in the form of non-qualifying options.
- Provide high-quality health benefits and a retirement plan with employer match.
- Offer internal mobility, cross-training, career-growth opportunities, flexible time off, paid time off, and volunteer opportunities.
- The position is listed as hybrid, as indicated by the #LI-hybrid designation.
Tech Stack
Categories