Strengthen Thumbtack products through threat modeling, vulnerability remediation, and secure design as a Canada-remote Application Security Engineer II. Work from Ontario or British Columbia.This senior application security position partners with Product and Engineering teams to assess risk and shape practical improvements. You will apply secure-by-default patterns, review architectures, and contribute reusable tooling and documentation.
The work supports systems, platforms, and developer workflows as Thumbtack scales.Key Responsibilities:
Partner with engineering teams to assess application security risksRecommend practical,
risk-informed security improvementsApply approved architectures and secure-by-default patternsParticipate in application security design reviews and threat modelingContribute to cross-functional security initiatives within defined scopesRequirements:
At least four years of relevant software or security experienceExperience with threat modeling and vulnerability remediationKnowledge of authentication, authorization, and secrets managementAbility to reason about tradeoffs and make sound recommendationsInterest in application and cloud infrastructure securityUse threat modeling, secure architecture reviews, and risk assessment to help Thumbtack reduce application security risk across Canada.