--- title: 'Sr. Application Security Engineer at Hims & Hers' canonical: 'https://feeny.ai/job/sr-application-security-engineer-hims-hers-united-states-at34jp1pgv1j' type: 'job' last_seen: '2026-11-10' --- # Sr. Application Security Engineer at Hims & Hers - **Company:** [Hims & Hers](https://feeny.ai/companies/hims-hers) - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-11-04 - **Last confirmed live:** 2026-11-10 - **Apply:** https://jobs.ashbyhq.com/hims-and-hers/f2cec81e-5ba5-46a8-83ba-3e298932f786 ## Job description Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by putting the customer first and delivering access to care that is affordable, accessible, and personal, from diagnosis to treatment to delivery. No two people are the same, so we provide access to personalized care designed for results. By normalizing health & wellness challenges and innovating on their solutions, we’re making better health outcomes easier to achieve. Hims & Hers is a public company, traded on the NYSE under the ticker symbol “HIMS.” To learn more about the brand and offerings, you can visit [hims.com/about](http://hims.com/about) and [hims.com/how-it-works](http://hims.com/how-it-works) . For information on the company’s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit [www.hims.com/careers-professionals](http://www.hims.com/careers-professionals). About the Role: We are seeking a Senior Application Security Engineer to join our security team. This role will focus on ensuring the security of our applications throughout the development lifecycle, with an emphasis on modern security practices. You will work closely with development teams to implement secure coding practices and maintain our application security posture. You Will: - Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications - Perform code reviews and provide secure coding guidance to development teams - Implement and maintain GitHub Advanced Security, including secret scanning and code scanning - Work with Engineering teams to triage and fix identified vulnerabilities - Support CI/CD security integration and automation - Review and secure API implementations, with focus on GraphQL security - Maintain security documentation You Have: - Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field - 5-8 years of experience in application security or related security field - Hands-on coding experience and ability to review code in multiple languages - Professional experience with SAST tools (e.g., GHAS) - Professional experience with DAST tools (e.g., Burp Suite, OWASP ZAP) - Professional experience with SCA tools (e.g., GHAS, Black Duck, WhiteSource) - Experience with GitHub Advanced Security features - Strong understanding of OWASP Top 10 and secure coding practices - Excellent communication skills to articulate security findings to technical and non-technical stakeholders ## Preferred Qualifications - Cloudflare WAF and Bot Management configuration (nice to have) - Security automation and scripting (Python, Go, or similar) - Contributions to the security community (research, tools, presentations) - Experience in healthcare or regulated industries Technical Stack - Security Tools:, Burp Suite, GitHub Advanced Security, - Languages: Proficiency in reviewing Python, JavaScript, Java, Go, and other modern languages - Development skills in languages like JS, TS. Familiarity with git. - Cloud: AWS (primary), multi-cloud experience beneficial - CI/CD: Experience with Jenkins, GitHub Actions, or similar ## What We're Looking For - Someone who can balance security requirements with business needs - Strong collaborator who can work effectively with development teams - Self-motivated individual who can manage multiple security assessments simultaneously Additional Information This is a remote position. We are a healthcare company that adheres to NIST CSF, NIST 800-53, SOC 2, and PCI DSS compliance frameworks. Our Benefits (there are more but here are some highlights): - Competitive salary & equity compensation for full-time roles - Unlimited PTO, company holidays, and quarterly mental health days - Comprehensive health benefits including medical, dental & vision, and parental leave - Employee Stock Purchase Program (ESPP) - 401k benefits with employer matching contribution - Offsite team retreats We are committed to building a workforce that reflects diverse perspectives and prioritizes ethics, wellness, and a strong sense of belonging. If you're excited about this role, we encourage you to apply—even if you're not sure if your background or experience is a perfect match. Hims considers all qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Hims & Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at accommodations@forhims.com and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims & Hers gives consideration to all qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address. To learn more about how we collect, use, retain, and disclose Personal Information, please visit our [Global Candidate Privacy Statement](https://www.hims.com/global-candidate-privacy-statement). ## About Hims & Hers ## Company Overview - **One-liner**: Hims & Hers is a leading digital health platform that connects people to licensed healthcare providers for personalized treatment plans across sexual health, hair care, weight loss, mental health, and more. - **Entity Type**: Public (NYSE: HIMS) - **Headquarters**: San Francisco, California, USA - **Founded**: 2017 - **Founders**: Andrew Dudum, Jack Abraham, Hilary Coles ## Core Business - Primary industry: Telehealth / Digital Health / Consumer Wellness - Target customers: B2C – individual consumers seeking convenient, stigma-free access to healthcare for common conditions (men’s and women’s health) - Mission: “To make the world feel great through the power of better health.” ## Products & Services - **Hims (Men’s Health)**: Access to care for erectile dysfunction, hair loss, anxiety, low testosterone, and more. Prescriptions are shipped discreetly. - **Hers (Women’s Health)**: Services for birth control, hair regrowth, skincare, mental health, menopause, and weight loss. - **MedMatch**: Proprietary AI/ML tool that analyzes millions of de-identified data points to help providers identify optimal treatments for individual patients. - **Mental Health**: Access to therapy and psychiatry via asynchronous messaging or live visits. - **Weight Loss**: Personalized treatment plans including GLP-1 medications and lifestyle coaching. - **At-home lab testing**: Available through strategic acquisitions (e.g., Honest Health in the U.K.). - **Retail presence**: Products available at select retailers like Target. ## Market Standing - **Valuation/Market Cap**: Publicly traded on NYSE: HIMS – market cap fluctuates; as of mid-2025, approximately $8–10B (check recent trading). *Not explicitly stated in provided sources.* - **Key Metric**: Over 2.4 million subscribers as of June 30, 2025 (source: [hims.com](https://www.hims.com/about/the-company)) - **Notable Investors/Partners**: Backed by venture firms (Atomic Labs, Cherubic Ventures); went public via SPAC in 2021; partnership with Ochsner Health. - **Growth Signals**: Expanded into new conditions (menopause, sleep, preventive health); launched Super Bowl ad in 2025; acquired Apostrophe (skincare) and Honest Health (U.K.); opened Ohio-affiliated pharmacy; retail expansion at Target; international expansion in the U.K. ## Competitive Advantages - **Asynchronous care model**: Patients communicate with providers on their own time via secure messaging, removing barriers like commute and wait times. - **Proprietary MedMatch AI**: Provides data-driven treatment recommendations to providers, improving personalization at scale. - **Strong brand & stigma reduction**: Normalizes conversations around sensitive health issues (ED, hair loss, mental health). - **Integrated pharmacy & fulfillment**: Partner pharmacies enable discreet home delivery and ongoing support. - **Large subscriber base & data moat**: 2.4M+ subscribers generate millions of de-identified interactions to train MedMatch. ## Strategic Focus - Scaling access to personalized care through data, lab testing, and AI. - Expanding into new conditions (low testosterone, menopause, sleep, preventive health). - Leveraging MedMatch and AI-supported coaching for smarter care delivery. - Taking the model global (U.K. presence with Honest Health). - Building long-term customer relationships through ongoing clinical support and educational resources. ## Why Work Here - **Remote-first culture**: “Work from anywhere you like in the U.S.” (source: [hims.com/careers-professionals](https://www.hims.com/careers-professionals)) - **Flexibility & autonomy**: Emphasis on giving team members freedom to do their best work. - **Benefits**: Competitive salary bands, stock options, 401(k) with matching, high-coverage medical/dental/vision, generous PTO and parental leave, $75/month utility stipend, employee product discount. - **Culture**: Described as fun, dynamic, compassionate; monthly all-hands, executive fireside chats, dedicated Slack channels for interests. - **Interview process**: Typically involves recruiter call, hiring manager, cross-functional panels, and possibly a take-home assessment; virtual via Zoom/Google Meet; accommodations available. - **Team size**: 1,100+ team members across 40 states (source: [hims.com/careers-professionals](https://www.hims.com/careers-professionals)) ## Sources 1. [hims.com – About the Company](https://www.hims.com/about/the-company) 2. [hims.com – Careers Professionals](https://www.hims.com/careers-professionals) 3. [builtin.com – What's It Like to Work at Hims & Hers](https://builtin.com/company/hims-hers/faq/workplace-perception) ## Other roles at Hims & Hers - [Principal Machine Learning Engineer](https://feeny.ai/job/principal-machine-learning-engineer-hims-hers-united-states-jv4v10ervm5z) — United States - [Staff Accountant, Accounts Payable](https://feeny.ai/job/staff-accountant-accounts-payable-hims-hers-united-states-9he2hpepwdnm) — United States - [Senior Financial Analyst, Ops Finance](https://feeny.ai/job/senior-financial-analyst-ops-finance-hims-hers-new-albany-8nh0v9f2911t) — New Albany, OH - [Lead, Pharmacy Technician D&F](https://feeny.ai/job/lead-pharmacy-technician-d-f-hims-hers-new-albany-v8teynfqnqpg) — New Albany, OH - [Area Manager](https://feeny.ai/job/area-manager-hims-hers-gilbert-k1mj154nb8st) — Gilbert, AZ - [Lead, Shipping & Fulfillment](https://feeny.ai/job/lead-shipping-fulfillment-hims-hers-gilbert-g4rdcvbqjj2n) — Gilbert, AZ - [Office Manager](https://feeny.ai/job/office-manager-hims-hers-gilbert-0vzf90c39c8b) — Gilbert, AZ - [Procurement Specialist](https://feeny.ai/job/procurement-specialist-hims-hers-gilbert-9f6qwqgzwkxc) — Gilbert, AZ - [Maintenance Technician II, Sterile Facilities](https://feeny.ai/job/maintenance-technician-ii-sterile-facilities-hims-hers-new-albany-qpnqe1h6npzn) — New Albany, OH - [Facilities Tech II, Maintenance](https://feeny.ai/job/facilities-tech-ii-maintenance-hims-hers-mesa-c5q6vwqfhrx3) — Mesa, AZ