Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by putting the customer first and delivering access to care that is affordable, accessible, and personal, from diagnosis to treatment to delivery. No two people are the same, so we provide access to personalized care designed for results. By normalizing health & wellness challenges and innovating on their solutions, we’re making better health outcomes easier to achieve.

Hims & Hers is a public company, traded on the NYSE under the ticker symbol “HIMS.” To learn more about the brand and offerings, you can visit hims.com/about and hims.com/how-it-works . For information on the company’s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit www.hims.com/careers-professionals.

About the Role

We are seeking a Senior Corporate Security Engineer to strengthen our enterprise security operations. This role focuses on protecting our corporate infrastructure through advanced threat detection, incident response, and security operations. You will work with cutting-edge SIEM, SOAR, and zero-trust technologies to defend against evolving threats.

You Will:

• Manage and optimize Sumo Logic SIEM for threat detection and investigation

• Implement and maintain Netskope SASE/ZTNA solutions for zero-trust security

• Conduct threat hunting using Recorded Future threat intelligence and YARA rules

• Develop and maintain detection rules and correlation logic in SIEM

• Orchestrate security operations using Tines SOAR platform

• Manage CrowdStrike EDR deployment and incident response

• Lead incident response activities as required

• Analyze security events and conduct forensic investigations

• Develop and maintain security runbooks and automation playbooks

• Monitor and respond to security alerts 24/7 through established procedures

• Collaborate with SOC team members on complex investigations

• Implement and maintain security controls for cloud environments (AWS, Azure, GCP)

• Maintain compliance with NIST CSF, NIST 800-53, SOC 2, and PCI DSS

• Produce security metrics and reports for leadership

You Have:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

• 5-8 years of experience in security operations, incident response, or similar role

• Hands-on experience with SIEM platforms (Sumo Logic or similar like Splunk, QRadar)

• Experience with SASE/ZTNA solutions (Netskope or similar like Zscaler, Prisma Access)

• Threat hunting experience including writing and deploying YARA rules

• Experience with EDR platforms (CrowdStrike or similar)

• Understanding of threat intelligence platforms and methodologies

• Incident response and forensics experience

• Basic understanding of cloud platforms (AWS, Azure, GCP)

• Knowledge of security frameworks: NIST CSF, NIST 800-53, SOC 2, PCI DSS

• Strong analytical and problem-solving skills

Preferred Qualifications

• Industry certifications from EC-Council, SANS, ISC2, or OffSec

• Experience with Recorded Future or similar threat intelligence platforms

• SOAR platform experience (Tines, Phantom, Demisto)

• Advanced YARA rule development

• Scripting abilities (Python, PowerShell, Bash)

• Experience with MITRE ATT&CK framework

• Cloud security certifications

• Experience with security data analytics and visualization

• Knowledge of CISA best practices

• Experience in healthcare or regulated industries

Our Benefits (there are more but here are some highlights):

• Competitive salary & equity compensation for full-time roles

• Unlimited PTO, company holidays, and quarterly mental health days

• Comprehensive health benefits including medical, dental & vision, and parental leave

• Employee Stock Purchase Program (ESPP)

• 401k benefits with employer matching contribution

• Offsite team retreats

We are committed to building a workforce that reflects diverse perspectives and prioritizes ethics, wellness, and a strong sense of belonging. If you're excited about this role, we encourage you to apply—even if you're not sure if your background or experience is a perfect match.

Hims considers all qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Hims & Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at accommodations@forhims.com and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims & Hers gives consideration to all qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address.

To learn more about how we collect, use, retain, and disclose Personal Information, please visit our Global Candidate Privacy Statement.