Strengthen Thumbtack products through threat modeling, vulnerability remediation, and secure design as a Canada-remote Application Security Engineer II. This senior application security position partners with Product and Engineering teams to assess risk and shape practical improvements. The work supports systems, platforms, and developer workflows as Thumbtack scales.Partner with engineering teams to assess application security risksRecommend practical, risk-informed security improvementsApply approved architectures and secure-by-default patternsParticipate in application security design reviews and threat modelingContribute to cross-functional security initiatives within defined scopesRequirements: At least four years of relevant software or security experienceExperience with threat modeling and vulnerability remediationKnowledge of authentication, authorization, and secrets managementAbility to reason about tradeoffs and make sound recommendationsInterest in application and cloud infrastructure securityUse threat modeling, secure architecture reviews, and risk assessment to help Thumbtack reduce application security risk across Canada. #