Principal Application Security Engineer

Benefits

Parental leave

Not verified

Non-birth-parent leave

Not verified

Family-building benefits

• Fertility benefits: Not verified
• Adoption assistance: Not verified
• Surrogacy assistance: Not verified

Mental health support

Not verified

Relocation assistance

Not verified

Childcare support

Not verified

Learning budget

Not verified

Verification

Not verified

Salary

$177K-$225K From the posting source checked Jun 20, 2026

401(k) match

Not verified

Was this benefit information wrong? Tell us.

Role

Role function

Security From the posting source checked Jun 20, 2026

Seniority

Principal From the posting source checked Jun 20, 2026

Work mode

Remote From the posting source checked Jun 20, 2026

In-office days

0 days From the posting source checked Jun 20, 2026

Schedule

Shift type

Not verified

Weekend work

Not verified

Application

Cover letter

Not verified

Assessment

Not verified

Deadline

Not stated

Where they hire

State eligibility is not yet verified.

About this role

Principal Application Security Engineer United States of America - Remote / Home Office Summary: Are you passionate about securing global-scale ecommerce services and applications that power millions of customers across over a hundred countries around the globe? We are looking for a hands-on Principal Product Security Engineer to lead our Secure Development Lifecycle assurance processes, our security automation technologies, drive the security hardening strategy across our product and respond to current and emerging security threats. This role can be fully remote and must reside in US. In this role, you will help us drive our Product Security strategy working with development teams globally to define new security capabilities, grow the team by hiring the best talent, and partner with senior leaders across the organization to deliver company-wide security initiatives. Responsibilities Include:: - Lead cross-functional projects and establish cutting-edge security development lifecycle practices - Directed security design reviews and threat modeling for new and existing services at iHerb - Evaluate, prototype, implement, and operate security-focused tools and services - Create new secure architecture standards, frameworks and patterns spanning multiple layers - Discover and analyze emerging security threats, determining applicability to iHerb and proactively implement centralized mitigations - Evaluate, prototype, implement, and operate security tools and services (DAST, SAST, SCA...) - Maintain a strong knowledge of current security threats and operational best practices - Drive our security assessment, penetration testing and bug bounty programs - Participate in security incident response In order to be successful in this role you must have: -

Read the full description at job-boards.greenhouse.io. FewerJobs shows a preview and links to the original posting.