Specialty
The role
Thumbtack, a home services marketplace, is hiring an Application Security Engineer II on its Security Engineering team to build secure defaults and reusable building blocks for engineers. The posting gives a pay range for candidates in Ontario and British Columbia.
What you will do
- Own and deliver application security work within defined projects or domains
- Identify, prioritize and help fix application security risks with engineering teams
- Apply secure-by-default patterns and approved architectures in design and review
- Take part in security design reviews and threat modeling for new and existing systems
- Write code, reviews and documentation that remove recurring classes of vulnerabilities
- Join security incident response and post-incident remediation
What they ask for
- 4+ years in software engineering and/or application security
- Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management and vulnerability remediation
- Strong grasp of secure coding and common risks such as the OWASP Top 10
- Ability to weigh trade-offs and make practical recommendations
- Clear communication with engineers of varying security expertise
- Interest in growing into cloud infrastructure security
This is our own short reading of the posting. The full description, and anything that has changed since, is on Thumbtack's careers page behind the apply button.
