Principal Application Security Engineer

🕒 July 17

🏄 California – Remote

🏄 California – Remote

💵 $177k - $225k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

👻 Ghost score 7%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

iHerb

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🛍️ eCommerce

🛒 Retail

🧘 Wellness

eCommerce • Retail • Wellness

iHerb is an online retailer founded in 1996 that provides a curated selection of health and wellness products to consumers worldwide. The company focuses on vitamins, natural supplements and remedies, sports nutrition, natural and dry foods, and environmentally friendly goods, with a mission to make health and wellness accessible, affordable, and convenient. iHerb operates as an e-commerce business with a retail focus and emphasizes customer experience and a values-driven company culture.

📋 Description

• Lead cross-functional projects and establish cutting-edge security development lifecycle practices • Directed security design reviews and threat modeling for new and existing services at iHerb • Evaluate, prototype, implement, and operate security-focused tools and services • Create new secure architecture standards, frameworks and patterns spanning multiple layers • Discover and analyze emerging security threats, determining applicability to iHerb and proactively implement centralized mitigations • Drive our security assessment, penetration testing and bug bounty programs

🎯 Requirements

• 8+ years of technical security leadership at a top-tier software company • Demonstrated technical foundation (Computer Science / Engineering degree or equivalent experience) • Solid understanding of common application and infrastructure security vulnerabilities and mitigations (OWASP Top 10, CWE 25…) • Proficiency implementing SDL process, technology, and automation in a DevOps environment • Experience with large-scale web applications and microservices, including API design, access management, authorization, authentication, data protection and encryption • Knowledge of major programming languages and frameworks (e.g. Python, C# .NET, JavaScript, node.js, Java...)

🏖️ Benefits

• Health insurance •401(k) matching • Paid time off • Flexible work hours • Professional development opportunities