Job opportunity
Senior Application Security Engineer
Jobicy
Build secure-by-default systems remotely across Ontario or British Columbia with Thumbtack as an Application Security Engineer II. Apply OWASP expertise daily.
As a senior engineer, you will own application security work within defined projects or domains. You will identify risks, conduct design reviews and threat modeling, and recommend practical improvements. The role also involves authentication, authorization, secrets management, secure coding, and vulnerability remediation.
Key Responsibilities:
Own application security work within defined projects or domains
Identify, prioritize, and help remediate application security risks
Conduct design reviews and threat modeling for systems
Write code, reviews, and documentation addressing vulnerabilities
Participate in incident response and post-incident remediation
Requirements:
Four or more years in software engineering or application security
Strong knowledge of OWASP Top 10 risks
Practical authentication, authorization, and secrets management experience
Strong secure coding and secure design pattern understanding
Clear communication and independent execution skills
Bring application security, threat modeling, and secure design expertise to Thumbtack’s Ontario or British Columbia remote team.
#J-18808-Ljbffr
Apply on source site As a senior engineer, you will own application security work within defined projects or domains. You will identify risks, conduct design reviews and threat modeling, and recommend practical improvements. The role also involves authentication, authorization, secrets management, secure coding, and vulnerability remediation.
Key Responsibilities:
Own application security work within defined projects or domains
Identify, prioritize, and help remediate application security risks
Conduct design reviews and threat modeling for systems
Write code, reviews, and documentation addressing vulnerabilities
Participate in incident response and post-incident remediation
Requirements:
Four or more years in software engineering or application security
Strong knowledge of OWASP Top 10 risks
Practical authentication, authorization, and secrets management experience
Strong secure coding and secure design pattern understanding
Clear communication and independent execution skills
Bring application security, threat modeling, and secure design expertise to Thumbtack’s Ontario or British Columbia remote team.
#J-18808-Ljbffr