Build secure-by-default systems remotely across Ontario or British Columbia with Thumbtack as an Application Security Engineer II. Apply OWASP expertise daily. As a senior engineer, you will own application security work within defined projects or domains. You will identify risks, conduct design reviews and threat modeling, and recommend practical improvements. The role also involves authentication, authorization, secrets management, secure coding, and vulnerability remediation.
Key Responsibilities
- Own application security work within defined projects or domains
- Identify, prioritize, and help remediate application security risks
- Conduct design reviews and threat modeling for systems
- Write code, reviews, and documentation addressing vulnerabilities
- Participate in incident response and post-incident remediation
Requirements:
- Four or more years in software engineering or application security
- Solid knowledge of OWASP Top 10 risks
- Practical authentication, authorization, and secrets management experience
- Strong secure coding and secure design pattern understanding
- Clear communication and independent execution skills Bring application security, threat modeling, and secure design expertise to Thumbtack’s Ontario or British Columbia remote team.