Application Security Engineer

Join Thumbtack, a company dedicated to helping small business owners thrive. As an Application Security Engineer, you will be part of the Security Engineering team, focused on enabling innovation at scale by integrating security into systems, platforms, and developer workflows. You will collaborate with various teams, assess risks, and recommend practical security improvements. This role offers a virtual-first working model, generous benefits, and a mission-driven environment.

Responsibilities

• Assumer la responsabilité et livrer le travail de sécurité des applications dans le cadre de projets ou de domaines définis, en contribuant aux initiatives de sécurité transversales.
• Identifier, prioriser et aider à remédier aux risques de sécurité des applications en partenariat avec les équipes d'ingénierie.
• Appliquer des modèles de sécurité par défaut et des architectures approuvées lors de la conception ou de l'examen des systèmes.

Requirements

• 4+ years of experience in software engineering and/or application security
• Clear written and verbal communication skills, including the ability to explain security issues to engineers with varying levels of security expertise
• A growth mindset and interest in learning from more senior engineers and expanding depth in both application and cloud infrastructure security over time
• Practical experience with application security techniques such as threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation. Strong understanding of secure coding practices and common application security risks (e.g., OWASP Top 10)
• Strong sense of ownership over assigned work, with the ability to execute independently and follow through
• Ability to assess security risks and break down complex problems, reason about tradeoffs, make sound recommendations, and deliver practical, impactful solutions with guidance when needed