iHerb is hiring a
Sr. CloudSec Engineer

Summary

The Cybersecurity Engineer role involves evaluating and enforcing cybersecurity and compliance controls to protect iHerb from internal and external threats. They are expected to design and develop cloud security solutions in AWS and other technologies, collaborate with technology teams, and perform architecture and design reviews. The candidate must have a Bachelor’s degree or equivalent experience, 4+ years of experience in system, network, cloud security, and risk management, and hands-on experience with Python and Infrastructure as Code for cloud environments.

Requirements

• Bachelor’s degree in related field of study or equivalent work-related experience
• 4+ years of experience in system, network, cloud security, and risk management
• Hand-on experience with Python and Infrastructure as Code for cloud environments
• Good experience with a wide range of AWS tools, AWS native Security Services, and practical experience with AWS cloud
• Experience implementing security practices in CI/CD environment – Ansible, Harness, Jenkins, etc

Responsibilities

• Evaluate and enforce cybersecurity and compliance controls to protect iHerb from internal and external threats
• Design, develop, coordinate, and document the secure operation of information systems and develop best practices for securing enterprise-wide data and information systems
• Develop and deploy automated security solutions by leveraging security toolchains in cloud environments to detect, prevent and remediate security issues
• Participate in architecture and design reviews with development/DevOps staff to incorporate effective security standards into design
• Evaluate and respond to global information technology security threats in relation to cloud technologies, systems and recommend security changes in response to emergent threats
• Perform hands-on support for a wide range of security technologies including, but not limited to: Pipeline security, DevSecOps, CloudFormation templates, Terraform, Docker, Kubernetes, SIEM, IPS, and Vulnerability Scanners

Benefits

• Employees (and their families) that meet eligibility criteria are eligible to participate in medical, dental, vision, and basic life insurance programs
• Employees will enjoy paid holidays throughout the calendar year
• Hired applicant may be awarded Restrict Stock Units and receive annual bonuses pursuant to eligibility and performance criteria defined in the respective plan documents and policies