Staff Application Security Engineer

Own the long-term technical direction for application security at Thumbtack, building and driving roadmaps to remediate systemic risks across the application stack. Design secure-by-default architectures, standards, and paved paths, and create shared security tooling, libraries, patterns, and services that integrate with CI/CD, cloud infrastructure, and developer workflows. Lead cross-functional initiatives, threat modeling, and design reviews, mentor engineers, and support incident response and post-incident learning.