hims-and-hers - Sr. Application Security Engineer

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field • 5-8 years of experience in application security or related security field • Hands-on coding experience and ability to review code in multiple languages • Professional experience with SAST tools (e.g., GHAS) • Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP) • Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource) • Experience with GitHub Advanced Security features • Strong understanding of OWASP Top 10 and secure coding practices • Excellent communication skills to articulate security findings to technical and non-technical stakeholders • Cloudflare WAF and Bot Management configuration (nice to have) • Security automation and scripting (Python, Go, or similar) • Contributions to the security community (research, tools, presentations) • Experience in healthcare or regulated industries • TECHNICAL STACK • Security Tools:, Burp Suite, GitHub Advanced Security, • Languages: Proficiency in reviewing Python, JavaScript, Java, Go, and other modern languages • Development skills in languages like JS, TS. Familiarity with git. • Cloud: AWS (primary), multi-cloud experience beneficial • CI/CD: Experience with Jenkins, GitHub Actions, or similar • Someone who can balance security requirements with business needs • Strong collaborator who can work effectively with development teams • Self-motivated individual who can manage multiple security assessments simultaneously • Hims considers all qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws. • It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. • Hims & Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at [email protected] and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims & Hers gives consideration to all qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address. • To learn more about how we collect, use, retain, and disclose Personal Information, please visit our Global Candidate Privacy Statement https://www.hims.com/global-candidate-privacy-statement.