Loading...
Mid LevelFull-timeRustAWSGCPCI/CDAI
Salary Range
$102,000 - $138,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for an Application Security Engineer to join our Security Engineering team at Thumbtack. This role focuses on enabling innovation at scale by making the secure path the easiest path. You will help ensure Thumbtack can ship fast, innovate boldly, and maintain customer trust as we scale.
Key Responsibilities
- →Own and deliver application security work within defined projects or domains
- →Identify, prioritize, and help remediate application security risks in partnership with engineering teams
- →Apply secure-by-default patterns and approved architectures when designing or reviewing systems
- →Support cloud infrastructure security by integrating security controls into CI/CD pipelines, IAM, networking, and runtime environments
- →Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements
- →Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues
- →Participate in security incident response and contribute to post-incident analysis and remediation
Requirements
- ✓4+ years of experience in software engineering, application security, or cloud infrastructure security
- ✓Practical experience with application security techniques such as threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation
- ✓Experience securing cloud-native systems in AWS and/or GCP
- ✓Ability to assess security risks and break down complex problems
- ✓Strong sense of ownership over assigned work, with the ability to execute independently
- ✓Clear written and verbal communication skills
