Thumbtack

4 weeks ago

Senior Enterprise Secruity Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Lead enterprise security initiatives at Thumbtack, focusing on AI-adjacent security, IAM hardening for non-human identities, and secure data pipelines. Deliver threat models and guardrails for AI tools and agents, influence architectural decisions across enterprise platforms, and mentor engineers while partnering with IT, Legal, Privacy, and Security teams to maintain trust as Thumbtack scales with AI.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Key Responsibilities

•Provide high-quality security assessments and threat models for first-party and third-party AI tools, agents, and AI-integrated systems, ensuring they adhere to enterprise security principles and patterns.
•Design and validate technical guardrails and reusable patterns that keep AI usage safe at Thumbtack, including AI behavior safeguards, tool/permission scoping, and human-in-the-loop boundaries.
•Harden IAM across the enterprise, focusing on non-human and delegated identities behind AI systems and applying least-privilege and lifecycle hygiene.
•Provide broader security engineering support across enterprise platforms, including SaaS security, data governance, endpoint security, and identity-centric controls.
•Lead cross-functional security initiatives end-to-end, partnering with IT, Engineering, Legal, Privacy, and Procurement to set requirements and drive adoption of secure patterns.

Key Requirements

•6+ years of experience in security engineering, enterprise security, application security, cloud security, or related field.
•Experience developing threat models and proposing technical guardrails for AI tooling and agentic systems, including non-human identities, tool/permission scoping, and safe defaults for agent behavior.
•Deep expertise in authentication and authorization (SSO, OAuth/OIDC, SAML, federation, SCIM), API security and token handling, secrets management, least-privilege design.
•Strong experience evaluating risk and conducting security design and architecture reviews across enterprise applications, SaaS platforms, integrations, and internally developed systems.
•Strong experience securing modern, cloud-native systems (AWS and/or GCP) and familiarity with audit logging, encryption, access control, data retention, and incident response.

Experience:6+ yearsAISecurityCloudSaaSEnterprise security

Skills:LeadershipMentoringCommunicationInfluence

Languages:English

Tech Stack:AWSGCPOAuthOIDCSAMLSCIMMCPIAMAPI securityEncryptionAudit loggingSecurity tooling

Company Brief

Thumbtack

Provides an online marketplace connecting local service professionals (home improvement, events, lessons, and more) with customers seeking quotes, reviews, and booking tools to hire vetted contractors and providers.

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2008

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Thumbtack

4 weeks ago

Senior Enterprise Secruity Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Key Responsibilities

•Provide high-quality security assessments and threat models for first-party and third-party AI tools, agents, and AI-integrated systems, ensuring they adhere to enterprise security principles and patterns.
•Design and validate technical guardrails and reusable patterns that keep AI usage safe at Thumbtack, including AI behavior safeguards, tool/permission scoping, and human-in-the-loop boundaries.
•Harden IAM across the enterprise, focusing on non-human and delegated identities behind AI systems and applying least-privilege and lifecycle hygiene.
•Provide broader security engineering support across enterprise platforms, including SaaS security, data governance, endpoint security, and identity-centric controls.
•Lead cross-functional security initiatives end-to-end, partnering with IT, Engineering, Legal, Privacy, and Procurement to set requirements and drive adoption of secure patterns.

Key Requirements

•6+ years of experience in security engineering, enterprise security, application security, cloud security, or related field.
•Experience developing threat models and proposing technical guardrails for AI tooling and agentic systems, including non-human identities, tool/permission scoping, and safe defaults for agent behavior.
•Deep expertise in authentication and authorization (SSO, OAuth/OIDC, SAML, federation, SCIM), API security and token handling, secrets management, least-privilege design.
•Strong experience evaluating risk and conducting security design and architecture reviews across enterprise applications, SaaS platforms, integrations, and internally developed systems.
•Strong experience securing modern, cloud-native systems (AWS and/or GCP) and familiarity with audit logging, encryption, access control, data retention, and incident response.

Experience:6+ yearsAISecurityCloudSaaSEnterprise security

Skills:LeadershipMentoringCommunicationInfluence

Languages:English

Tech Stack:AWSGCPOAuthOIDCSAMLSCIMMCPIAMAPI securityEncryptionAudit loggingSecurity tooling

Company Brief

Thumbtack

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2008

Website LinkedIn