Application Security Engineer II — Secure-by-Default at Scale

Thumbtack; Victoria; On-site; CAD 118,000 - 153,000; Full time

Job summary

Thumbtack seeks a security-focused engineer to own application security within defined projects. You will partner with product and engineering to assess risk, apply secure-by-default patterns, and remediate vulnerabilities through code, reviews, and documentation.

You’ll participate in incident response and post-incident analysis while expanding depth in cloud infrastructure security over time.

Qualifications

• 4+ years in software engineering or application security.
• Experience with threat modeling and secure-by-default patterns.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Ability to assess risk, tradeoffs, and propose practical fixes.

Responsibilities

• Own and deliver application security work within defined projects or domains.
• Identify, prioritize, and remediate security risks with engineering teams.
• Apply secure-by-default patterns when designing or reviewing systems.
• Collaborate with product and engineering on risk assessments and improvements.
• Write code, reviews, and documentation to address vulnerabilities.
• Participate in security incident response and post-incident analysis.

Skills

Security engineering

Threat modeling

Secure design patterns

Authentication & authorization

Vulnerability remediation

Clear communication

Job description

Thumbtack seeks a security-focused engineer to own application security within defined projects. You will partner with product and engineering to assess risk, apply secure-by-default patterns, and remediate vulnerabilities through code, reviews, and documentation.

You’ll participate in incident response and post-incident analysis while expanding depth in cloud infrastructure security over time.