Security Engineer (App Sec and Cloud Infra) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Thumbtack · 2 hours ago

Security Engineer (App Sec and Cloud Infra)

Thumbtack is a company that helps millions of people confidently care for their homes. They are seeking a Security Engineer to own and deliver application security work, partner with engineering teams to identify and remediate security risks, and integrate security controls into cloud infrastructure.

Home ServicesLocalProfessional ServicesService Industry
check
Growth Opportunities
check
H1B Sponsor Likelynote

Responsibilities

Own and deliver application security work within defined projects or domains
Contribute to cross-functional security initiatives, executing clearly scoped pieces of larger efforts
Identify, prioritize, and help remediate application security risks in partnership with engineering teams
Apply secure-by-default patterns and approved architectures when designing or reviewing systems
Support cloud infrastructure security by integrating security controls into CI/CD pipelines, IAM, networking, and runtime environments
Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements
Participate in application security design reviews and threat modeling for new and existing systems
Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues
Participate in security incident response and contribute to post-incident analysis and remediation

Qualification

Application securityCloud infrastructure securityThreat modelingSecure coding practicesAWS/GCP securityClear communicationOwnershipGrowth mindset

Required

4+ years of experience in software engineering, application security, or cloud infrastructure security
Practical experience with application security techniques such as threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation
Strong understanding of secure coding practices and common application security risks (e.g., OWASP Top 10)
Experience securing cloud-native systems in AWS and/or GCP
Ability to assess security risks and break down complex problems, reason about tradeoffs, make sound recommendations, and deliver practical, impactful solutions with guidance when needed
Strong sense of ownership over assigned work, with the ability to execute independently and follow through
Clear written and verbal communication skills, including the ability to explain security issues to engineers with varying levels of security expertise
A growth mindset and interest in learning from more senior engineers and expanding depth in both application and cloud infrastructure security over time

Company

Thumbtack

company-logo
Thumbtack is a home services website connecting users with local service providers.

H1B Sponsorship

Thumbtack has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (35)
2024 (48)
2023 (39)
2022 (53)
2021 (69)
2020 (47)

Funding

Current Stage
Late Stage
Total Funding
$773.2M
Key Investors
Qatar Investment AuthoritySequoia CapitalBaillie Gifford
2024-07-31Debt Financing· $75M
2021-06-15Series G· $275M
2019-07-22Series F· $150M

Leadership Team

leader-logo
Marco Zappacosta
Co-founder & CEO
linkedin
Company data provided by crunchbase