Remote Product Security Engineer Job in United States iHerb, LLC

Who you are

• Demonstrated technical foundation with a solid understanding of common application and infrastructure security vulnerabilities and mitigations
• Proficiency in implementing SDL processes technology and automation in a DevOps environment
• Experience with large-scale web applications and microservices including API design access management authorization authentication data protection and encryption
• Excellent problem-solving critical thinking collaboration and communication skills
• Experience driving application security training programs security champions and awareness campaigns

Desirables

• Active security community contributor
• Knowledge of multiple programming languages

What the job involves

• Drive cross-functional projects and establish cutting-edge security development lifecycle practices
• Lead security design reviews and threat modeling for new and existing services at iHerb
• Evaluate prototype implement and operate security-focused tools and services
• Develop new secure architecture standards frameworks and patterns spanning multiple layers
• Understand and analyze emerging security threats determining applicability to iHerb and proactively implement centralized mitigations
• Evaluate prototype implement operate security tools and services
• Maintain a strong knowledge of current security threats and operational best practices
• Take part in our security assessment penetration testing and bug bounty programs