Sr. Application Security Engineer

US - Remotefull timeRemote

Apply on Employer Site

senior

$135k–$165k

H1B: no

Hims and Hers Senior Application Security Engineer at Hims & Hers ensures application security throughout the development lifecycle using modern security practices. The role includes conducting security assessments, code reviews, and supporting CI/CD security integration.

Responsibilities

We are seeking a Senior Application Security Engineer to join our security team. This role will focus on ensuring the security of our applications throughout the development lifecycle, with an emphasis on modern security practices. You will work closely with development teams to implement secure coding practices and maintain our application security posture.
Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications
Perform code reviews and provide secure coding guidance to development teams
Implement and maintain GitHub Advanced Security, including secret scanning and code scanning
Work with Engineering teams to triage and fix identified vulnerabilities
Support CI/CD security integration and automation
Review and secure API implementations, with focus on GraphQL security
Maintain security documentation

Qualification

Bachelor's degree in Computer ScienceSecurity ToolsLanguagesDevelopment skills in languages like JSCloud

Required

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
5-8 years of experience in application security or related security field
Hands-on coding experience and ability to review code in multiple languages
Professional experience with SAST tools (e.g., GHAS)
Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP)
Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource)
Experience with GitHub Advanced Security features
Strong understanding of OWASP Top 10 and secure coding practices
Excellent communication skills to articulate security findings to technical and non-technical stakeholders
Someone who can balance security requirements with business needs
Strong collaborator who can work effectively with development teams
Self-motivated individual who can manage multiple security assessments simultaneously

Preferred

Cloudflare WAF and Bot Management configuration (nice to have)
Security automation and scripting (Python, Go, or similar)
Contributions to the security community (research, tools, presentations)
Experience in healthcare or regulated industries
Security Tools:, Burp Suite, GitHub Advanced Security,
Languages: Proficiency in reviewing Python, JavaScript, Java, Go, and other modern languages
Development skills in languages like JS, TS. Familiarity with git.
Cloud: AWS (primary), multi-cloud experience beneficial

Benefits

Dental
Vision
401(k)
PTO
Equity/RSU
Parental Leave
Wellness

Company

Hims and Hers

View company page

Source: ashby

Active within the past hour

Remote-friendly

More roles at Hims and Hers

Maintenance Technician II, Sterile Facilities

New Albany, Ohio

Procurement Specialist

Gilbert, Arizona

Dispense & Fill Pharmacy Technician

Columbus, Ohio

Staff Data Scientist

US - Remote

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

SASTDASTSCAGitHub Advanced SecurityBurp SuiteOWASP ZAP

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site