Senior Application Security Engineer, Hims & Hers
$145-165k
+ Equity compensation for full-time roles + Employee Stock Purchase Program (ESPP)
Multi-specialty telehealth platform
Be an early applicant
Multi-specialty telehealth platform
1001+ employees
Be an early applicant
$145-165k
+ Equity compensation for full-time roles + Employee Stock Purchase Program (ESPP)
1001+ employees
Company mission
To help the world feel great through the power of better health.
Role
Who you are
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
- 5-8 years of experience in application security or a related security field
- Hands-on coding experience and ability to review code in multiple languages
- Professional experience with SAST tools (e.g., SonarQube, Checkmarx, Fortify)
- Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP)
- Professional experience with SCA tools (e.g., Snyk, Black Duck, WhiteSource)
- Experience with GitHub Advanced Security features
- Container security scanning and IaC security scanning tools experience
- Strong understanding of OWASP Top 10 and secure coding practices
- Experience with penetration testing methodologies
- Knowledge of security frameworks: NIST CSF, NIST 800-53, SOC 2, PCI DSS
- Excellent communication skills to articulate security findings to technical and non-technical stakeholders
What the job involves
- We are seeking a Senior Application Security Engineer II to join our security team
- This role will focus on ensuring the security of our applications throughout the development lifecycle, with an emphasis on modern security practices including AI/ML security considerations
- You will work closely with development teams to implement secure coding practices and maintain our application security posture
- Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications
- Perform code reviews and provide secure coding guidance to development teams
- Implement and maintain GitHub Advanced Security, including secret scanning and code scanning
- Assess and improve security of Infrastructure as Code (IaC) deployments using Terraform
- Evaluate container security in our Docker and Kubernetes environments
- Support CI/CD security integration and automation
- Conduct penetration testing and red team/purple team exercises on applications
- Review and secure API implementations, with focus on GraphQL security
- Evaluate AI/ML model security and implement protections against prompt injection and other AI-specific threats
- Collaborate with the Staff AppSec Engineer on CIAM and advanced AI security initiatives
- Maintain security documentation and contribute to security awareness training
Our take
Hims & Hers is a direct-to-consumer brand made for men and women, offering products for skin care, birth control, erectile dysfunction, hair loss and more. The company aims to create an open and honest culture of care that is accessible for everyone, no matter who you are or where you live.
Hims & Hers approach healthcare differently through a telemedicine approach combined with a comprehensive wholesale and branding strategy. This allows customers to get diagnosed and treated at a lower cost and with greater convenience whilst the company simultaneously increases customer brand's presence across the US.
The company is increasingly focused on becoming a modern healthcare brand, and has a huge addressable market to go after. Recent launch of an app has helped the company grow significantly. Further, it is focusing investment into platform infrastructure and the development of partnerships with physical stores including retail giant Walmart, as well as continuing to launch new products such as its range of volumising shampoos.
Steph
Company Specialist at Welcome to the Jungle
Insights
38% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jan 2019
$100m
LATE VC
Jul 2018
$50m
SERIES B
Total funding: $197m
Company benefits
- Dental insurance
- Maternity & Paternity Leave
- Gym Membership
- Commuter Checks & Assistance
- Work from home opportunities
- Health insurance
Company HQ
Marina District, San Francisco, CA
Leadership
Andrew Dudum
(CEO)Previously co-founder of Atomic, Homebound, Terminal and Bungalow and Investor & Advisor at Stable Auto, TalklQ, and Mira Technologies.
Hilary Coles
(Senior VP Brand & Innovation)Previously earned an MBA from the Kellogg School of Management at Northwestern University.
Jack Abraham
(Investor)Founder and Managing Partner of Atomic. Co-Founder and Investor at Replicant, Raydiant, Bungalow, Homebound, Terminal and Zenreach.
Share this job
View 36 more jobs at Hims & Hers