Product Security Engineer

Summary

Join iHerb as a Product Security Engineer - SAP and contribute to the security of our SAP applications and systems. You will be responsible for security engineering across various SAP modules, collaborating with application owners and stakeholders. Key duties include security reviews, authorization design, compliance enforcement, incident handling, and identifying/remediating security gaps. This role requires strong SAP security expertise, experience in project implementation, and the ability to work both independently and collaboratively. The position offers a competitive salary and benefits package, including health insurance, retirement plan, paid time off, and potential bonuses.

Requirements

• Bachelor’s degree in a related field of study or equivalent work-related experience
• 3-5 years of hands-on SAP Security experience
• Understanding of SAP security best practices
• Self-motivated, flexible, openness to learn new things, and strong focus on customer needs
• Ability to work with limited supervision and exhibit a strong sense of urgency
• Ability to effectively mentor team members
• Strong time management and decision-making skills
• Experience in successful project implementations
• Able to support off-hours work as required

Responsibilities

• Conduct security reviews and consultations of SAP and non-SAP applications connecting to SAP instances
• Assist in the design and build of security authorizations
• Ensure compliance with security policies and procedures
• Resolve access problems and handle security incidents
• Provide security and technical expertise to support the development of security objects to satisfy business requirements
• Demonstrate a comprehensive skill set with testing authorizations for multiple environments and coordinate testing with business/technical users
• Validate system configurations to ensure the safety of information systems assets and protect information systems from intentional or inadvertent access or destruction
• Implement best practices when applying knowledge of information systems security standards/practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling)
• Identify security gaps that expose iHerb to potential threats, and develop short- and long-term prioritized remediation to address those gaps
• Identify and resolve problems, often anticipating issues before they occur or before they grow; develop and evaluate options; and implement solutions that support the business
• Create dashboards, configure alerts, implement and support security software platforms, configure and maintain Onapsis for SAP platform and tools, scan, generate vulnerability reports for S4, HANA DB, ABAP custom code, analyze and follow up with SAP teams to implement remediations
• Understand compliance requirements that may impact security, and work with business areas and project teams to develop security solutions that address these requirements
• Collaborate with business partners, project teams, and team members to build secure solutions that protect data and enable the business with tools and processes that make sense, and adapt to changing business needs both on-premises, and in the cloud
• Design, develop, maintain SAP user management and review security architecture across SAP environments

Benefits

• Medical, dental, vision, and basic life insurance programs
• 401(k) plan
• Time Off
• Paid Sick Leave
• Paid holidays
• Restricted Stock Units
• Annual bonuses