Application Security Engineer II - Build Secure Systems

Thumbtack; Canada; Remote; CAD 118,000 - 153,000; Full time

Benefits offered by this job

Paid time off

Remote work stipend

Parental leave

Family planning benefits

Mental health support

Thumbtack Bucks

Job summary

Thumbtack’s Security Engineering team is expanding to advance secure engineering practices as we scale with AI-powered features. You’ll own security work within projects, work with engineers to remediate risks, and design secure systems.

The role emphasizes ownership, clear communication, and ongoing learning in application and cloud security. The team values collaboration with product and data teams and aims to ship securely while maintaining velocity, with a focus on practical, risk-informed

Qualifications

• 4+ years of experience in software engineering and/or application security.

Responsibilities

• Own and deliver application security work within defined projects or domains.
• Identify, prioritize, and help remediate application security risks in partnership with engineering teams.
• Apply secure-by-default patterns and approved architectures when designing or reviewing systems.
• Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements.
• Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues.
• Participate in security incident response and contribute to post-incident analysis and remediation.

Skills

4+ years experience

Threat modeling

Secure design patterns

Authentication & authorization

Secrets management

Vulnerability remediation

OWASP Top 10

Security awareness

Job description

Thumbtack’s Security Engineering team is expanding to advance secure engineering practices as we scale with AI-powered features. You’ll own security work within projects, work with engineers to remediate risks, and design secure systems.

The role emphasizes ownership, clear communication, and ongoing learning in application and cloud security. The team values collaboration with product and data teams and aims to ship securely while maintaining velocity, with a focus on practical, risk-informed