Senior Application Security Engineer

Build secure-by-default systems remotely across Ontario or British Columbia with Thumbtack as an Application Security Engineer II. Apply OWASP expertise daily.As a senior engineer, you will own application security work within defined projects or domains. You will identify risks, conduct design reviews and threat modeling, and recommend practical improvements. The role also involves authentication, authorization, secrets management, secure coding, and vulnerability remediation.Key Responsibilities:
Own application security work within defined projects or domainsIdentify, prioritize, and help remediate application security risksConduct design reviews and threat modeling for systemsWrite code, reviews, and documentation addressing vulnerabilitiesParticipate in incident response and post-incident remediationRequirements:
Four or more years in software engineering or application securityStrong knowledge of OWASP Top 10 risksPractical authentication, authorization, and secrets management experienceStrong secure coding and secure design pattern understandingClear communication and independent execution skillsBring application security, threat modeling, and secure design expertise to Thumbtack’s Ontario or British Columbia remote team.
#J-18808-Ljbffr