Senior Application Security Engineer at Barracuda Networks Inc. — Remote, CAN | Base Career

Full Job Posting

CI/CD automation tools (SAST, SCA, Secrets Scanning, etc.)
AI security controls and LLM risk management
Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs
Facilitate lightweight, feature-level threat models and drive risk-based discussions
Perform hands-on application penetration tests and security-focused source code reviews
Drive risk rating and vulnerability management processes
Partner with product, platform, and engineering leads to drive security initiatives
Lead outcome-focused design review discussions and security trainings
Provide framework-specific remediation guidance to developers
5 - 8+ years in product-focused AppSec, with a track record of embedding security and reducing late-stage findings via automation and developer enablement
Deep practical knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls)
Proficient in at least two programming languages (TypeScript/JavaScript, Python, Ruby, Java, Go, etc.)
Hands-on experience with application penetration testing and code reviews
Proficient in threat modeling and risk-based analysis
Strong organizational, time-management, communication, and presentation skills
Equity, in the form of non-qualifying options
High-quality health benefits
Retirement Plan with employer match
Career-growth opportunities
Flexible Time Off and Paid Time Off benefits
Volunteer opportunities

Senior Application Security Engineer