Application Security Engineer II

🕒 August 28

🇨🇦 Canada – Remote

💵 $118.2k - $152.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 23%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Thumbtack

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

👥 B2C

🏪 Marketplace

B2C • Marketplace • Home Services

Thumbtack is a platform that connects people with local professionals offering various services such as home improvement, repair, and cleaning. Users can search for specific services like house cleaning, handyman work, electrical and wiring repair, and more, getting access to trusted professionals with reviews and cost estimates. The platform is designed to make finding, hiring, and working with professionals simple and efficient, with the convenience of managing everything from one app. It serves millions of people across the U. S. , providing a wide range of services including landscaping, event planning, and more.

📋 Description

• Own and deliver application security work within defined projects or domains • Contribute to cross-functional security initiatives and execute clearly scoped portions of larger efforts • Identify, prioritize, and help remediate application security risks with engineering teams • Apply secure-by-default patterns and approved architectures when designing or reviewing systems • Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements • Participate in application security design reviews and threat modeling for new and existing systems • Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues • Participate in security incident response and contribute to post-incident analysis and remediation • Collaborate with Product, Engineering, Platform, and Data teams to shape system design, guide architectural decisions, and evolve the company’s security posture

🎯 Requirements

• 4+ years of experience in software engineering and/or application security • Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation • Strong understanding of secure coding practices and common application security risks, including OWASP Top 10 • Ability to assess security risks, break down complex problems, reason about tradeoffs, make sound recommendations, and deliver practical solutions with guidance when needed • Ability to execute independently and follow through on assigned work • Clear written and verbal communication skills • Interest in learning from more senior engineers and expanding expertise in application and cloud infrastructure security • Must be able to work from Ontario or British Columbia, Canada • Must be amenable to working a graveyard shift aligned with US Central Time hours, following Philippine holidays • Must answer required application questions regarding MSSP experience, AI tools in security operations, stakeholder geography, location, and visa sponsorship

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume