Sr. Security Engineer, Product & Apps

| USA | Remote
Employer Provided Salary: 135,000-165,000 Annually
Salary data is provided by the employer. Please note this is not a guarantee of compensation.
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

Hims & Hers Health, Inc. (better known as Hims & Hers) is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are revolutionizing telehealth for providers and their patients alike. Making personalized solutions accessible is of paramount importance to Hims & Hers and we are focused on continued innovation in this space. Hims & Hers offers nonprescription products and access to highly personalized prescription solutions for a variety of conditions related to mental health, sexual health, hair care, skincare, heart health, and more.

Hims & Hers is a public company, traded on the NYSE under the ticker symbol “HIMS”. To learn more about the brand and offerings, you can visit hims.com and forhers.com, or visit our investor site. For information on the company’s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit www.hims.com/careers-professionals.

About the Role:

As a Senior Security Engineer, you will be a thought leader in the Security Team focused on helping design, implement, and mature innovative and cutting-edge security capabilities. Senior Security Engineer ensures defense-in-depth, provides hands-on technical leadership for security domains, assists with defining vision and execution of strategy aligning to business needs, and is also expected to help solve a wide range of security challenges. The Senior Security Engineer is part of a highly collaborative security program and an engineering culture-driven technology organization.

You Will:

  • Ownership of security scanning complex (SAST, SCA, DAST, etc.)  
  • Develop and promote security architecture and design strategies, frameworks, and patterns while collaborating closely with engineering, and product organization
  • Actively partner with stakeholders to understand business requirements and develop supporting security and resiliency principles to ensure the adoption of industry best practices
  • Ensure information security and regulatory requirements are effectively integrated into new or improved systems
  • Demonstrates expert technology competence in security domains including but not limited to application, cloud, resiliency, identity, access management, and data security
  • Establish credibility among technology experts as the subject matter expert across security disciplines
  • Review and influence the security of vendor applications and systems to ensure they meet our security objectives and can be implemented securely
  • Analyze technical risks of existing systems and applications against correlating policies and risks, and provide appropriate remediation or risk reduction plans
  • Participate in the design and execution of vulnerability assessments, red team /penetration tests, security audits, and cybersecurity exercises
  • Define, publish, and implement Security Standards / Frameworks
  • Effectively communicates across departments and leadership groups and builds consensus in support of strategic objectives
  • Establish a security vision and roadmap while ensuring it aligns with the cybersecurity strategy, enterprise business and technology strategy, and industry trends.
  • Mentor and guide engineering teams on security best practices
  • Serve as a champion for secure SDLC and secure cloud adoption
  • Threat modeling, end-to-end security evaluation

You Have:

  • Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent background or experience
  • 8+ years of relevant technical experience
  • 5+ years of security experience
  • Prior experience with Mobile and API security
  • Deep understanding of the Twelve-Factor App methodology
  • Prior experience working with cloud-based platforms (AWS, Azure, GCP) in an enterprise environment
  • Prior experience with security scanning tools (SAST, DAST, SCA, etc.), PEN Testing, and the Bug Bounty program
  • Prior experience in the healthcare industry including a strong understanding of HIPAA Privacy and Security Rules preferred
  • Experience in the IAM domain including tools (Okta, Centrify, CyberArk, Ping) preferred
  • Significant experience with Java/Kotlin, JavaScript, web services (REST/SOAP), and modern development and delivery techniques
  • Strong knowledge of authentication and authorization industry standards such as SAML, OpenID, OAuth2
  • CISSP, CCSP,  and AWS Cloud certification desirable
  • Experience developing solutions in an iterative (Agile) approach and hands-on knowledge of DevSecOps practices 

Our Benefits (there are more but here are some highlights):

  • Competitive salary & equity compensation for full-time roles
  • Unlimited PTO, company holidays, and quarterly mental health days
  • Comprehensive health benefits including medical, dental & vision, and parental leave
  • Employee Stock Purchase Program (ESPP)
  • Employee discounts on hims & hers & Apostrophe online products
  • 401k benefits with employer matching contribution
  • Offsite team retreats


#LI-Remote



Outlined below is a reasonable estimate of H&H’s compensation range for this role for US-based candidates. If you're based outside of the US, your recruiter will be able to provide you with an estimated salary range for your location.
The actual amount will take into account a range of factors that are considered in making compensation decisions including but not limited to skill sets, experience and training, licensure and certifications, and location. H&H also offers a comprehensive Total Rewards package that may include an equity grant.
Consult with your Recruiter during any potential screening to determine a more targeted range based on location and job-related factors.

An estimate of the current salary range for US-based employees is

$135,000$165,000 USD

We are focused on building a diverse and inclusive workforce. If you’re excited about this role, but do not meet 100% of the qualifications listed above, we encourage you to apply.

Hims is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, state, or local law. Hims considers all qualified applicants in accordance with the San Francisco Fair Chance Ordinance.

Hims & hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at [email protected]. Please do not send resumes to this email address.

For our California-based applicants – Please see our California Employment Candidate Privacy Policy to learn more about how we collect, use, retain, and disclose Personal Information. 

Read Full Job Description
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

Location

Originally headquartered in San Francisco, we recently announced we are moving to a remote-first company! Flexibility to live and work anywhere.

An Insider's view of hims & hers

How would you describe the company’s work-life balance?

Flexibility is a given. If you need time for family, personal commitments, or just to relax, you can take it. There's unlimited PTO and everyone is encouraged to take advantage of it. Overall, there's tremendous commitment to every employee's good health and well-being.

Chris

Director, Growth Marketing

How do you collaborate with other teams in the company?

One of the most rewarding parts of my job is collaborating with so many talented people across teams. My team works closely with other units, such as legal, comms, content and medical. I’m fortunate to work somewhere that encourages and rewards collaboration, because we build a better product, and ultimately a better company, when we work together.

April

VP of Public Policy

What makes someone successful on your team?

Good vibes and a growth mindset! We want the team to be there for one another to celebrate success and learn from mistakes. Technical awesomeness (React Native, Postgres, Kotlin, Docker) and passion for healthcare and fast-growth companies are important too :)

Vicente

Senior Engineering Lead

What unique initiatives do you have that encourage innovation?

We are passionate about doing what we can to help our employees bring their best selves to work. We encourage everyone to ask questions (even anonymously), provide work-life balance (with our permanent remote work model and unlimited PTO), and make sure everyone has the ability to make an impact and unleash their creativity—no matter their title.

Hilary

Co-Founder

What are hims & hers Perks + Benefits

hims & hers Benefits Overview

Competitive salary + stock options.
High-coverage medical (99%), dental & vision insurance for employees & family.
Flexible paid time of + generous parental leave policy.
401(k) plan, HSA & FSA.
Remote-first culture + monthly stipend for phone, internet and home office needs.
Weekly meditation sessions + monthly wellness initiatives.
Virtual team-building events (i.e. yoga, trivia, bingo) + weekly Happy Hours.
Biweekly All-Hands.
Exclusive employee discount on Hims & Hers product.

Culture
Open door policy
OKR operational model
Team based strategic planning
Flexible work schedule
Remote work program
Health Insurance + Wellness
Flexible Spending Account (FSA)
Disability insurance
Dental insurance
Vision insurance
Health insurance
Life insurance
Team workouts
Financial & Retirement
401(K)
Company equity
Child Care & Parental Leave
Generous parental leave
Family medical leave
Vacation + Time Off
Unlimited vacation policy
Paid holidays
Paid sick days
Office Perks
Commuter benefits
Company-sponsored outings
Company-sponsored happy hours
Recreational clubs
Home-office stipend for remote employees
Professional Development
Lunch and learns
Promote from within

More Jobs at hims & hers

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about hims & hersFind similar jobs like this