Sr. Application Security Engineer

The role

This Senior Application Security Engineer will ensure the security of applications throughout the development lifecycle. You will work with development teams to implement secure coding practices and maintain application security posture.

What you will do

• Conduct security assessments using SAST, DAST, and SCA tools
• Perform code reviews and provide secure coding guidance to development teams
• Implement and maintain GitHub Advanced Security, including secret scanning and code scanning
• Work with Engineering teams to triage and fix identified vulnerabilities
• Support CI/CD security integration and automation
• Review and secure API implementations, with focus on GraphQL security
• Maintain security documentation

Required qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
• 5-8 years of experience in application security or related security field
• Hands-on coding experience and ability to review code in multiple languages
• Professional experience with SAST tools (e.g., GHAS)
• Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP)
• Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource)
• Experience with GitHub Advanced Security features
• Strong understanding of OWASP Top 10 and secure coding practices
• Excellent communication skills to articulate security findings to technical and non-technical stakeholders

Nice to have

• Cloudflare WAF and Bot Management configuration
• Security automation and scripting (Python, Go, or similar)
• Contributions to the security community (research, tools, presentations)
• Experience in healthcare or regulated industries

Benefits

• Competitive salary & equity compensation
• Unlimited PTO
• Company holidays
• Quarterly mental health days
• Comprehensive health benefits including medical, dental & vision
• Parental leave
• Employee Stock Purchase Program (ESPP)
• 401k benefits with employer matching contribution
• Offsite team retreats

About the company

Hims & Hers is a health and wellness platform that provides access to personalized care. It is a public company traded on the NYSE.