Security Engineer (App Sec and Cloud Infra)

Own application security within defined projects, delivering scoped security initiatives that help teams ship securely as Thumbtack scales. Identify and remediate app security risks in partnership with engineering, applying secure-by-default patterns and approved architectures. Integrate security controls into CI/CD pipelines, IAM, networking, and runtime environments. Participate in design reviews, threat modeling, and incident response, writing code, reviews, and documentation to reduce recurring vulnerability classes.