Sr. Application Security Engineer
Hims & Hers, US - Remote
The role
We are seeking a Senior Application Security Engineer to join our security team. This role will focus on ensuring the security of our applications throughout the development lifecycle, with an emphasis on modern security practices. You will work closely with development teams to implement secure coding practices and maintain our application security posture.
What you will do
- Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications
- Perform code reviews and provide secure coding guidance to development teams
- Implement and maintain GitHub Advanced Security, including secret scanning and code scanning
- Work with Engineering teams to triage and fix identified vulnerabilities
- Support CI/CD security integration and automation
- Review and secure API implementations, with focus on GraphQL security
- Maintain security documentation