Senior Application Security Engineer

Barracuda; Town of Florida (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Equity opportunities

High-quality health benefits

Retirement Plan with employer match

Flexible Time Off

Volunteer opportunities

Job summary

Barracuda, a leading cybersecurity company, is seeking a Senior Application Security Engineer to shape the future of their AppSec program. This role involves embedding security across the development lifecycle, conducting penetration tests, and fostering security initiatives.

The ideal candidate will have 5-8+ years in AppSec, strong programming skills, and a passion for developer enablement. Barracuda offers equity, high-quality health benefits, and flexible time-off, ensuring every team member is valued and can make a meaningful impact.

Qualifications

• 5 - 8+ years in product-focused AppSec.
• Deep knowledge of core security concepts.
• Hands-on experience with application penetration testing.
• Proficient in at least two programming languages.
• Strong organizational, time-management, and communication skills.

Responsibilities

• Embed security across the development lifecycle.
• Facilitate lightweight, feature-level threat models.
• Perform hands-on application penetration tests.
• Drive risk rating and vulnerability management processes.
• Partner with product and engineering leads.
• Lead design review discussions and security trainings.

Skills

Application penetration testing

Programming (TypeScript/JavaScript, Python, Ruby, Java, Go)

Threat modeling

Risk-based analysis

Automation in AppSec

Communication skills

Organizational skills

Tools

CI/CD automation tools

Job description

Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.

We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.

Envision yourself at Barracuda

As a Senior Application Security Engineer, you’ll help shape the future of our AppSec program. You’ll work effectively and efficiently in a small, high-impact team, bringing a sense of ownership and community. You’ll have the opportunity to learn quickly, provide feedback on long-term improvements, and drive strategic security initiatives across our product portfolio.

Tech Stack

• TypeScript/JavaScript, Python, Ruby, Java, Go
• CI/CD automation tools (SAST, SCA, Secrets Scanning, etc.)
• AI security controls and LLM risk management

What You’ll Be Working On

• Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs
• Facilitate lightweight, feature-level threat models and drive risk-based discussions
• Perform hands-on application penetration tests and security-focused source code reviews
• Drive risk rating and vulnerability management processes
• Partner with product, platform, and engineering leads to drive security initiatives
• Lead outcome-focused design review discussions and security trainings
• Provide framework-specific remediation guidance to developers

What You Bring To The Role

• 5 - 8+ years in product-focused AppSec, with a track record of embedding security and reducing late-stage findings via automation and developer enablement
• Deep practical knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls)
• Proficient in at least two programming languages (TypeScript/JavaScript, Python, Ruby, Java, Go, etc.)
• Hands-on experience with application penetration testing and code reviews
• Proficient in threat modeling and risk-based analysis
• Strong organizational, time-management, communication, and presentation skills

What You’ll Get From Us

A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.

• Equity, in the form of non-qualifying options
• High-quality health benefits
• Retirement Plan with employer match
• Career-growth opportunities
• Flexible Time Off and Paid Time Off benefits
• Volunteer opportunities

Job ID: 27-0245