Application Security Engineer

Position: Application Security Engineer at Thumbtack
Drive security innovation at Thumbtack as an Application Security Engineer II. Focus on application security risks, secure-by-default designs, and automated solutions in our dynamic environment.

At Thumbtack, the Cybersecurity Team is essential for enabling secure growth while incorporating AI features into our services. In this role, you will lead application security initiatives, collaborate with engineering teams, and execute application security work efficiently. Your expertise will help define security parameters, assess risks, and implement solutions that lower friction for developers.

Key Responsibilities:

• Own application security efforts within specific projects

• Identify and remediate security risks with engineering teams

• Apply secure architectures during system design reviews

• Partner on application security design reviews and threat modeling

• Contribute to security incident response and post-incident analysis

Requirements:

• 4+ years in software engineering or application security

• Experience in threat modeling and secure design patterns

• Strong understanding of OWASP Top 10 vulnerabilities

• Ability to assess complex security risks and propose solutions

• Clear communication skills for explaining security concepts

Leverage your security expertise to ensure rapid, safe innovation at Thumbtack.