10 hours ago
Remote, CanadaMid Level
Responsibilities
- Own and deliver application security work within defined projects or domains.
- Identify, prioritize, and help remediate application security risks with engineering teams.
- Apply secure-by-default patterns and approved architectures in system design and reviews.
- Assess risk, recommend practical security improvements, and participate in application security design reviews and threat modeling.
- Write code, reviews, and documentation to address vulnerabilities and reduce recurring security issues.
- Participate in security incident response and post-incident analysis and remediation.
Requirements
- 4+ years of experience in software engineering and/or application security.
- Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management, vulnerability remediation, secure coding, and common application security risks such as OWASP Top 10.
- Ability to assess security risks, reason about tradeoffs, make sound recommendations, and deliver practical solutions with guidance when needed.
- Ability to own assigned work, execute independently, and follow through.
- Clear written and verbal communication skills, including explaining security issues to engineers with varying security expertise.
- Growth mindset and interest in expanding application and cloud infrastructure security expertise.
Categories
About Thumbtack
Thumbtack builds a marketplace and app that connects U.S. homeowners with service professionals for repairs, maintenance, and home improvements. Pros pay for leads and bookings generated on the platform, and can use built-in tools for scheduling, messaging, and payments. Founded in 2008 and headquartered in San Francisco, it features a network of about 300,000 local businesses and has supported over 11 million projects nationwide.