iHerb
Sr. Security Engineer II
United States of America - Remote / Home Office · Senior
Sponsorship not specified$162k-$190kDetected 4 days ago
PythonBashAWSGCPAzureCloud PlatformsDockerKubernetesTerraformHelmCI/CDData EngineeringCybersecuritySOARDetection EngineeringJiraVendor ManagementRecruiting
About the role
- We are looking for a hands-on Security Automation Engineer and builder who thrives on creating automated, secure cloud environments and scaling security operations.
- This role combines deep cloud infrastructure expertise with security orchestration and identity management to strengthen our overall defensive posture.
- Conduct risk assessments, enforce security best practices, and continuously improve our defensive posture through automation and tooling.
Responsibilities
- Design, develop, and maintain automation frameworks and scripts (Python, Bash, Terraform) to streamline security processes and workflows.
- Deploy and manage secure, scalable infrastructure on AWS using Terraform via Scalr and Harness, with additional presence in GCP and Azure.
- Build, support, and optimize AWS Step Functions, Lambda, and EventBridge workflows from a centralized tooling account that operates across multiple spoke accounts in the AWS Organization.
- Maintain Kubernetes clusters using Helm charts, including in-house security automations on pods that integrate with CSPM tools and Jira ticketing processes.
- Develop and enforce cloud security guardrails using OPA, Guardrails, Service Control Policies (SCPs), IaC security gates, and tag policies.
- Architect, build, and maintain Splunk Enterprise Security (ES) integrations, including onboarding log sources, managing indexes, tuning correlation searches, and configuring automated response actions.
- Design and implement Splunk SOAR playbooks to automate security tasks, reduce Mean Time to Respond (MTTR), and scale SOC capabilities.
- Serve as the subject matter expert for Okta Identity Engine (OIE) - building and managing scalable SSO policies, modern authentication (SAML/OIDC), and identity lifecycle processes.
- Leverage AWS security services (GuardDuty, Macie, IAM, Control Tower, KMS, CloudTrail, EventBridge) to build event-driven automations for threat detection and response.
- Own the in-house Jira management process for CSPM findings and the supporting data pipeline that feeds AWS QuickSight dashboards.
Requirements
- Proven ability to work independently with minimal supervision while collaborating effectively with cross-functional teams and providing technical guidance.
- Experience designing automation solutions that reduce MTTD and MTTR.
- 10+ years of experience.
Nice to have
- Experience with Scalr, Harness, or similar IaC deployment platforms.
- Familiarity with GCP and/or Azure cloud environments.
- Security certifications (AWS Security Specialty, CKS, Splunk-related certifications, or Okta certifications) are a plus.
- Employees will enjoy paid holidays throughout the calendar year.
- Anticipated Pay Scale:
- Staffing Agency Submission Notice
- iHerb does not accept unsolicited 3rd party ("Agency") candidates.
- If you are an Agency, please send any requests to be considered as a supplier in our Vendor Management System to staffingvendors@iherb.com.
Compensation
- $162,000 - $190,000 USD
Benefits
- Earth's best-curated selection of health and wellness products, at the best possible value, delivered with the most convenient experience.
- We're the world's largest eCommerce platform dedicated to vitamins, minerals, and supplements, and other health and wellness products.
- Our vision is to become the #1 destination for health and wellness across the world.
- With a passion for wellness and a mind for innovative solutions, iHerb team members share a vision for a healthier world that drives them each day.
- Focus on the Customer · Empower Our People · Be Entrepreneurial & Pivot Quickly ·
- iHerb Benefits
- For the comprehensive benefits list, visit www.iHerbBenefits.com.
- For our international team members, you may be eligible for benefits depending on the country where you are employed.
- The Talent Acquisition Partner/local HR representative will go over the benefits you are eligible for.
- iHerb is on a mission to make health and wellness accessible to all.
Company info
- Embrace Diversity & Inclusion · Strive for Simplicity
- Built on a strong foundation, our programs provide options and upgrades with flexibility, protection, and security in mind.
- iHerb is an Equal Opportunity employer.
- All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. iHerb provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment.
- From supplements to skincare to grocery items, we ship over 50,000 products, from over 1,800 brands direct to our customers in 180+ countries.
- Our 5 Shared Values unite our global team:
This listing is sourced directly from iHerb's careers page and normalized into a canonical job model.