Application Security Engineer

Join Thumbtack, a company dedicated to helping small business owners thrive. As an Application Security Engineer, you will be part of the Security Engineering team, focused on enabling innovation at scale by integrating security into systems, platforms, and developer workflows. You will collaborate with various teams, assess risks, and recommend practical security improvements. This role offers a virtual-first working model, generous benefits, and a mission-driven environment.

- 4+ years of experience in software engineering and/or application security
- Clear written and verbal communication skills, including the ability to explain security issues to engineers with varying levels of security expertise
- A growth mindset and interest in learning from more senior engineers and expanding depth in both application and cloud infrastructure security over time
- Practical experience with application security techniques such as threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation. Strong understanding of secure coding practices and common application security risks (e.g., OWASP Top 10)
- Strong sense of ownership over assigned work, with the ability to execute independently and follow through
- Ability to assess security risks and break down complex problems, reason about tradeoffs, make sound recommendations, and deliver practical, impactful solutions with guidance when needed