Sr. Application Security Engineer
Hims & Hers1 day ago
Base Salary
$135k - $165k/yr
Responsibilities
- Conduct application security assessments using SAST, DAST, and SCA tools.
- Perform code reviews and provide secure coding guidance to development teams.
- Implement and maintain GitHub Advanced Security, including secret scanning and code scanning.
- Triage and remediate vulnerabilities with engineering teams.
- Integrate and automate security controls in CI/CD pipelines.
- Review and secure API implementations, including GraphQL security.
- Maintain security documentation.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5–8 years of experience in application security or a related security field.
- Hands-on coding experience and ability to review code in multiple languages.
- Professional experience with SAST, DAST, and SCA tools, including tools such as GHAS, Burp Suite, OWASP ZAP, Black Duck, and WhiteSource.
- Experience with GitHub Advanced Security features.
- Strong understanding of the OWASP Top 10 and secure coding practices.
- Strong communication skills for explaining security findings to technical and non-technical stakeholders.
- Preferred: Cloudflare WAF and Bot Management configuration experience.
- Preferred: security automation and scripting experience with Python, Go, or similar languages.
- Preferred: contributions to the security community and experience in healthcare or regulated industries.
Benefits
- Remote position.
- Competitive salary and equity compensation for full-time roles.
- Unlimited PTO, company holidays, and quarterly mental health days.
- Medical, dental, vision, and parental leave benefits.
- Employee Stock Purchase Program and 401(k) benefits with employer matching.
- Offsite team retreats.
Tech Stack
Categories
About Hims & Hers
Hims & Hers operates a direct-to-consumer telehealth and pharmacy platform for men’s and women’s health, offering online visits, prescriptions, and over‑the‑counter products for conditions like hair loss, sexual health, dermatology, and mental health. It monetizes through subscriptions and product sales, with nationwide shipping and affiliated providers and pharmacies. Founded in 2017 and headquartered in San Francisco, the company went public on the NYSE under the ticker HIMS in 2021.