Security Engineer • Lead

Who you are

You have a strong background in application security with at least 5 years of experience leading security initiatives in a complex environment — you've developed and implemented security frameworks that protect critical applications and services. Your expertise in secure development practices allows you to guide teams in integrating security into their workflows effectively. You are well-versed in security tools and methodologies, including DAST, SAST, and Secrets Management, and you understand the nuances of cloud-native security. You possess excellent communication skills, enabling you to collaborate with cross-functional teams and convey complex security concepts to non-technical stakeholders. You are proactive in identifying emerging security threats and have a strategic mindset to address them before they impact the organization.

Desirable

Experience with compliance standards such as PCI-DSS or ISO 27001 would be a plus, as would familiarity with security automation technologies. You have a passion for mentoring and developing junior security professionals, fostering a culture of security awareness within the organization.

What you'll do

In this role, you will lead the Secure Development Lifecycle assurance processes, ensuring that security is embedded in every phase of application development. You will conduct security design reviews and sophisticated threat modeling for both new and existing services, identifying potential vulnerabilities and recommending mitigations. Your responsibilities will include establishing secure architecture standards and frameworks that span application, cloud-native, and infrastructure layers. You will evaluate and implement core security tools and services, providing governance and oversight to ensure they are used effectively across the organization. Additionally, you will stay ahead of current and emerging security threats, analyzing their applicability to iHerb and implementing centralized mitigations to protect the organization. You will also collaborate with various teams to drive security initiatives and ensure compliance excellence in a fast-paced environment.

What we offer

iHerb offers a fully remote work environment, allowing you to work from anywhere in the United States. We provide competitive compensation and benefits, including health insurance, retirement plans, and opportunities for professional development. You will be part of a diverse and inclusive team that values collaboration and innovation, working together to secure our ecommerce platform for millions of customers worldwide. Join us in making a significant impact in the world of online shopping while advancing your career in application security.