hims & hers · 3 days ago

Senior Security Engineer

Boston, MA

Full-time

Remote

Senior Level

$135K/yr - $165K/yr

8+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Health CareLifestyle

Actively Hiring

Insider Connection @hims & hers

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Ownership of security scanning complex (SAST, SCA, DAST, etc.)

Develop and promote security architecture and design strategies, frameworks, and patterns while collaborating closely with engineering, and product organization

Actively partner with stakeholders to understand business requirements and develop supporting security and resiliency principles to ensure the adoption of industry best practices

Ensure information security and regulatory requirements are effectively integrated into new or improved systems

Demonstrates expert technology competence in security domains including but not limited to application, cloud, resiliency, identity, access management, and data security

Establish credibility among technology experts as the subject matter expert across security disciplines

Review and influence the security of vendor applications and systems to ensure they meet our security objectives and can be implemented securely

Analyze technical risks of existing systems and applications against correlating policies and risks, and provide appropriate remediation or risk reduction plans

Participate in the design and execution of vulnerability assessments, red team /penetration tests, security audits, and cybersecurity exercises

Define, publish, and implement Security Standards / Frameworks

Effectively communicates across departments and leadership groups and builds consensus in support of strategic objectives

Establish a security vision and roadmap while ensuring it aligns with the cybersecurity strategy, enterprise business and technology strategy, and industry trends.

Mentor and guide engineering teams on security best practices

Serve as a champion for secure SDLC and secure cloud adoption

Threat modeling, end-to-end security evaluation

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Java/KotlinJavaScriptWeb ServicesREST/SOAPModern DevelopmentAuthenticationAuthorizationSAMLOpenIDOAuth2Agile ApproachDevSecOps PracticesSecurity ExperienceMobile SecurityAPI SecurityTwelve-Factor App MethodologyCloud-Based PlatformsAWSAzureGCPSecurity Scanning ToolsSASTDASTSCAPEN TestingBug Bounty ProgramHealthcare Industry KnowledgeHIPAA Privacy RulesHIPAA Security RulesIAM Domain Experience