Application Security Engineer II

Job not on LinkedIn

🕒 August 28

🇨🇦 Canada – Remote

💵 $118.2k - $152.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Thumbtack

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏪 Marketplace

☁️ SaaS

💰 $75M Debt Financing - Thumbtack on 2024-07

Marketplace • SaaS

Thumbtack is an online marketplace that connects homeowners with local service professionals for home maintenance, repairs, remodeling, and other home projects. The platform lets customers describe projects in their own words, browse local pros across many trades (e. g. , cleaners, handymen, plumbers, electricians, painters, HVAC, contractors, landscapers), view reviews and cost estimates, message pros without sharing contact details until messaging, and offers a guarantee up to $2,500 if a job isn't done as agreed. Thumbtack provides consumer-facing apps and a separate pro-focused experience with resources, community, and tools for professionals to manage leads and reviews. It covers every county in the U. S. and emphasizes project guides, cost guides, and home maintenance plans.

📋 Description

• Own and deliver application security work within defined projects or domains • Contribute to cross-functional security initiatives and execute clearly scoped portions of larger efforts • Identify, prioritize, and help remediate application security risks with engineering teams • Apply secure-by-default patterns and approved architectures when designing or reviewing systems • Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements • Participate in application security design reviews and threat modeling for new and existing systems • Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues • Participate in security incident response and contribute to post-incident analysis and remediation • Collaborate with Product, Engineering, Platform, and Data teams to shape system design, guide architectural decisions, and evolve the company’s security posture

🎯 Requirements

• 4+ years of experience in software engineering and/or application security • Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation • Strong understanding of secure coding practices and common application security risks, including OWASP Top 10 • Ability to assess security risks, break down complex problems, reason about tradeoffs, make sound recommendations, and deliver practical solutions with guidance when needed • Ability to execute independently and follow through on assigned work • Clear written and verbal communication skills • Interest in learning from more senior engineers and expanding expertise in application and cloud infrastructure security • Must be able to work from Ontario or British Columbia, Canada • Must be amenable to working a graveyard shift aligned with US Central Time hours, following Philippine holidays • Must answer required application questions regarding MSSP experience, AI tools in security operations, stakeholder geography, location, and visa sponsorship