Principal Application Security Engineer, Barracuda Networks
$174-250k
+ Equity. Salary applicable to California, New York City, Westchester County, Washington, Colorado applicants only
Cybersecurity solutions
Open for applications
Cybersecurity solutions
1001+ employees
Open for applications
$174-250k
+ Equity. Salary applicable to California, New York City, Westchester County, Washington, Colorado applicants only
1001+ employees
Company mission
To protect and support our customers for life.
Role
Who you are
- A deep understanding of software security best practices and vulnerabilities, especially as they relate to web applications (e.g. OWASP Top 10)
- Experience identifying vulnerabilities in software and SaaS services
- Experience in source code review, preferably for Python, PHP and Go
- Experience in scoping and performing manual application penetration testing
- Experience in assessing the risk of identified vulnerabilities, and providing correct, robust and actionable recommendations to mitigate and/or resolve the vulnerabilities
- Experience in understanding software vulnerabilities, in finding other instances of the vulnerability across codebases, and in identifying collateral/related vulnerabilities
- Experience in assessing the implemented resolution of a vulnerability for completeness and accuracy, and identifying bypasses for the implemented resolution
- Experience in working collaboratively with software development teams to identify vulnerabilities in all stages of software development
- Experience in communicating effectively with people of varying security proficiency and interest (fellow security professionals, engineering, and management)
- The ability to coordinate and participate in wide-scale Software Incident Security Response exercises such as the log4j response, understanding and unpacking information as incidents unfold, and in working across the organization to deliver a comprehensive "Identify, Resolve, Validate" solution
- Basic programming experience in at least one language, preferably Python or Go, and experience in automating routine tasks such as searching source code and manipulating data
- 7+ years of experience
- The ability to perform source code review in new and unfamiliar languages using knowledge of security best practices and a willingness to read documentation
- Solutions architecture review experience, and the ability to identify opportunities and vulnerabilities early in the specification and development of software
- Threat modelling experience
- Fuzzing experience
- Experience using and integrating automated software security scanners such as SAST/DAST/SCA
- An understanding of Infrastructure as Code and cloud platform security (preferably Azure and AWS)
- An understanding of identity, authentication and authorization protocols including OAuth/OpenID Connect and SAML
- Published examples of work such as original research, vulnerability advisories, conference talks, bug bounty writeups or CTF writeups
- The ability to identify opportunities for process improvement, including automation and the authorship of software (scanners, fuzzers, helper utilities etc.)
- Experience participating in and/or managing bug bounty programs
- Experience with and/or a willingness to collaborate with other security functions such as compliance and policy, network/corporate security, security monitoring and incident response
What the job involves
- The Principal Application Security Engineer assures the safety and security of Barracuda Networks software and services through source code review, manual application security assessment, operation and integration of automated security assessment solutions, architecture review, and expert advice regarding software security trends, threats, best practices and incidents
- Through assuring the safety and security of Barracuda Networks software and services, the Application Security Engineer helps to keep our customers and their data safe and secure
- Ensure the secure delivery of software from design through to implementation
- Maintain awareness of software security trends, incidents, and best practices, and provide expert advice and guidance to engineering teams regarding secure development and vulnerability remediation
- Manage Barracuda’s bug bounty programs
- Work collaboratively with the organization, including with Security, Compliance and Engineering, to understand and remediate computer and software security incidents
- Evaluate new and emerging security technologies, features, and products
Our take
In an increasingly online world, with email hacks and data leaks becoming more and more common, cyber security is more important than ever. Barracuda aims to provide this with its comprehensive suite of security software.
It offers a number of packages, focusing on email security, app and cloud protection, network security and data protection to provide end-to-end coverage for its customers' IT operations. It invests heavily in R&D and product development to keep on top of new (and increasingly prevalent) email phishing scams, as well as incorporated XDR capabilities to close security gaps generated by the rise in hybrid and remote working.
Barracuda is an established player within the cyber security market with over 200,000 enterprise customers including brands like Shiseido, Carrefour and Accor. It was acquired in 2022 by KKR, a global investment firm, and is using the investment of capital to further improve its product, grow its team and expand its marketing reach.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
May 2017
$0.8m
GRANT
Oct 2009
$5.6m
LATE VC
Total funding: $72.4m
Company benefits
- High-quality health benefits
- Retirement Plan with employer match
- Career-growth opportunities
- Flexible Time Off and Paid Time Off benefits
- Volunteer opportunities
- Equity, in the form of non-qualifying options
Company HQ
San Tomas, Campbell, CA
Leadership
Zachary Levow
(CTO)Previously co-founded Affinity Path and Spinway, as well as working in Software Development and Architectural Software Design for Sun Microsystems, Cadence Design Systems and Motorola.
Share this job
View 12 more jobs at Barracuda Networks