Senior Application Security Developer
Barracuda Networks Voir toutes les offres
- Ottawa, ON
- Permanent
- Temps-plein
- TypeScript/JavaScript, Python, Ruby, Java, Go
- CI/CD automation tools (SAST, SCA, Secrets Scanning, etc.)
- AI security controls and LLM risk management
- Embed security across the development lifecycle, moving from pen-test/documentation-heavy to guardrail-driven programs
- Facilitate lightweight, feature-level threat models and drive risk-based discussions
- Perform hands-on application penetration tests and security-focused source code reviews
- Drive risk rating and vulnerability management processes
- Partner with product, platform, and engineering leads to drive security initiatives
- Lead outcome-focused design review discussions and security trainings
- Provide framework-specific remediation guidance to developers
- 5-8+ years in product-focused AppSec, with a track record of embedding security and reducing late-stage findings via automation and developer enablement
- Deep practical knowledge of core security concepts (authN/Z, session management, input/output handling, logging, data protection, access controls)
- Proficient in at least two programming languages (TypeScript/JavaScript, Python, Ruby, Java, Go, etc.)
- Hands-on experience with application penetration testing and code reviews
- Proficient in threat modeling and risk-based analysis
- Strong organizational, time-management, communication, and presentation skills