Job Closed

This listing is no longer active.

hims & hers logo
hims & hers

hims & hers offers a modern approach to health and wellness.

Senior Application Security Engineer

Application EngineerApplication EngineerOtherRemoteSeniorTeam 201-500Since 2017H1B No SponsorCompany SiteLinkedIn

Location

United States

Posted

142 days ago

Salary

$145K - $175K / year

Seniority

Senior

Bachelor Degree5 yrs expEnglishDockerGraphQLKubernetesTerraform

Job Description

Senior Application Security Engineer

hims & hers

• Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications • Perform code reviews and provide secure coding guidance to development teams • Implement and maintain GitHub Advanced Security, including secret scanning and code scanning • Assess and improve security of Infrastructure as Code (IaC) deployments using Terraform • Evaluate container security in our Docker and Kubernetes environments • Support CI/CD security integration and automation • Conduct penetration testing and red team/purple team exercises on applications • Review and secure API implementations, with focus on GraphQL security • Evaluate AI/ML model security and implement protections against prompt injection and other AI-specific threats • Collaborate with the Staff AppSec Engineer on CIAM and advanced AI security initiatives • Maintain security documentation and contribute to security awareness training

Job Requirements

  • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
  • 5-8 years of experience in application security or related security field
  • Hands-on coding experience and ability to review code in multiple languages
  • Professional experience with SAST tools (e.g., SonarQube, Checkmarx, Fortify)
  • Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP)
  • Professional experience with SCA tools (e.g., Snyk, Black Duck, WhiteSource)
  • Experience with GitHub Advanced Security features
  • Container security scanning and IaC security scanning tools experience
  • Strong understanding of OWASP Top 10 and secure coding practices
  • Experience with penetration testing methodologies
  • Knowledge of security frameworks: NIST CSF, NIST 800-53, SOC 2, PCI DSS
  • Excellent communication skills to articulate security findings to technical and non-technical stakeholders.

Benefits

  • Competitive salary & equity compensation for full-time roles
  • Unlimited PTO, company holidays, and quarterly mental health days
  • Comprehensive health benefits including medical, dental & vision, and parental leave
  • Employee Stock Purchase Program (ESPP)
  • 401k benefits with employer matching contribution
  • Offsite team retreats

Related Categories

Related Job Pages

More Application Engineer Jobs

Webflow logo

Staff Application Security Engineer

Webflow

Webflow is the way to design, build, and launch powerful websites visually — without coding.

OtherRemoteTeam 501-1,000Since 2013H1B Sponsor

• Collaborate with the Webflow engineering team to secure Webflow’s web application platform and ecosystem. • Bring security best practices to the software development lifecycle. • Champion security standards while balancing business strategies and requirements. • Support Webflow’s security compliance frameworks • Find security vulnerabilities through grey-box techniques • Propose solutions at the architecture and code level. • Contribute code and architecture improvements to enable security within Webflow’s application. • Cross-train entry and mid-level application security engineers.

California
$164K - $247K / year
Job Closed
Thumbtack logo

Staff Application Security Engineer

Thumbtack

We help people care for their home from top to bottom — and empower small businesses nationwide to grow.

OtherRemoteTeam 1,001-5,000H1B Sponsor

• Own the long-term technical direction for application security across Thumbtack • Lead large, cross-functional security initiatives from problem definition through delivery • Design secure architectures and implement shared security tooling • Partner with teams to prioritize security investments based on risk and impact • Mentor engineers and drive organization-wide improvements in application security

United States
$212.5K - $275K / year
Job Closed
Nextiva logo

Senior VoIP Application Engineer

Nextiva

Nextiva describes itself as the fastest-growing privately-held provider of cloud communications, offering tools to help businesses stay in touch with their cust

• Develop and maintain high-quality VOIP applications that meet customer needs, focusing on reliability, performance, and scalability. • Integrate VOIP solutions with third-party systems, ensuring seamless communication between internal and external platforms. • Provide support for complex VOIP issues, including system failures, call quality problems, and application errors. Work to quickly diagnose and resolve issues. • Work closely with cross-functional teams, including engineering, product management, and operations, to ensure seamless deployment and operation of VOIP applications. • Test new VOIP features, products, and services, ensuring they meet quality standards before deployment. • Create and maintain technical documentation for VOIP applications, including system architecture, troubleshooting guides, and integration processes. • Continuously monitor and optimize VOIP applications to improve performance, scalability, and user experience. • Ensure VOIP applications meet security standards and compliance requirements. • Assist internal and external teams with troubleshooting, providing solutions, and offering expert guidance on VOIP-related issues. • Stay current with emerging VOIP technologies and trends, contributing to the development of new features and improvements to existing applications.

United States
$100K - $185K / year
Job Closed
OtherRemoteTeam 1,001-5,000H1B No Sponsor

• Develop and prepare technical solutions and quotation proposals for new equipment • Respond to customer inquiries for new equipment • Define the Elliott scope of supply • Complete requisition forms for major purchased auxiliaries • Review customer and industry standard specifications • Create proposals including data sheets, scope, performance curves, pricing, and delivery • Participate in bid clarification meetings with Sales/customer • Work with Sales/Management to adjust scope/delivery/price as needed • Transfer data to Project Engineering / Project Management after an order is received • Develop standards, repeatable procedures and calculations

United States
Job Closed