Senior Application Security Engineer

Barracuda Networks
Ottawa
Workplace: HybridFull timeCAD 98,000 - 130,000 annuallyFunction: CybersecurityExperience: 5-8 yearsSkills: ["Communication","Presentation","Organizational skills","Time-management"]

Help shape the AppSec program by embedding security across the development lifecycle. You’ll facilitate feature-level threat models, perform hands-on application penetration tests and security-focused code reviews, and drive risk rating and vulnerability management. Partner with product, platform, and engineering leads on strategic security initiatives, lead outcome-focused design reviews and trainings, and provide framework-specific remediation guidance. Work within a small, high-impact team.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Barracuda Networks
Barracuda Networks
2 days ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live
Reposted: similar role first listed 7 months ago

Job Summary

Help shape the AppSec program by embedding security across the development lifecycle. You’ll facilitate feature-level threat models, perform hands-on application penetration tests and security-focused code reviews, and drive risk rating and vulnerability management. Partner with product, platform, and engineering leads on strategic security initiatives, lead outcome-focused design reviews and trainings, and provide framework-specific remediation guidance. Work within a small, high-impact team.
Location: Ottawa
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs.
  • •Facilitate lightweight, feature-level threat models and lead risk-based discussions.
  • •Conduct hands-on application penetration tests and security-focused source code reviews.
  • •Drive risk rating and vulnerability management processes.
  • •Partner with product, platform, and engineering leads to run security trainings and provide remediation guidance to developers.

Pay and Benefits

Salary: CAD 98,000 - 130,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceRetirement

Key Requirements

  • •5–8+ years in product-focused AppSec, embedding security and reducing late-stage findings through automation and developer enablement.
  • •Deep knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls).
  • •Proficient in at least two programming languages such as TypeScript/JavaScript, Python, Ruby, Java, or Go.
  • •Hands-on experience with application penetration testing and security-focused code reviews.
  • •Proficient in threat modeling and risk-based analysis, with strong communication and presentation skills.
Experience:5-8 yearsProduct-focused AppSec
Skills:CommunicationPresentationOrganizational skillsTime-management
Tech Stack:TypeScriptJavaScriptPythonRubyJavaGoCI/CDSASTSCASecrets scanningLLM risk managementAI security controls

Company Brief

Barracuda Networks
Provides cloud-enabled security and data protection solutions including email protection, network and application security, and backup and recovery services for businesses, service providers, and government organizations worldwide.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Established Company
Funding: Private Equity Backed
Headquarters: Campbell, United States
Founded: 2003
WebsiteLinkedIn