Application Security Engineer II
Thumbtack · Remote · Remote, Ontario · Remote, British Columbia ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (North America)
- 4+ years experience
- AppSec & Software Eng
- Threat modeling focus
- CAD $118k-153k
Join the Cybersecurity team at Thumbtack to make security a force multiplier for engineering velocity. You will design secure defaults and reusable building blocks, enabling product teams to innovate confidently while reducing risk across AI-powered features and internal systems.
What you'll do
- Own application security deliverables within defined projects or domains
- Identify and help remediate security risks in partnership with engineering
- Apply secure-by-default patterns during system design and reviews
- Conduct threat modeling and assess risk for new and existing systems
- Write code and documentation to fix vulnerabilities and prevent recurrence
- Participate in incident response and post-incident analysis
What you'll need
- 4+ years of experience in software engineering or application security
- Practical knowledge of threat modeling and secure design patterns
- Experience with authentication, authorization, and secrets management
- Strong understanding of OWASP Top 10 and secure coding practices
- Ability to break down complex problems and recommend practical solutions
- Clear communication skills for explaining security issues to engineers
How you'll work
- Fully remote position
- Open to candidates in Ontario and British Columbia
What you get
- Equal opportunity workplace
- Reasonable accommodation for disabilities provided