AI Security Engineer - Taiwan

The role

You will research emerging AI security threats and develop security and data models. You will build production-grade products, backend services, and scalable data pipelines to protect enterprise customers.

What you will do

• Develop expertise in how enterprise AI platforms authenticate, access data, and interact with SaaS applications.
• Research emerging AI security threats like prompt injection and RAG poisoning.
• Develop threat models for AI applications, agents, and data flows.
• Design data models for AI assets, identities, and attack paths.
• Prototype and deliver production-grade AI security products.
• Build backend services and APIs for security analysis and remediation.
• Build scalable pipelines to ingest and analyze security telemetry.
• Write queries and analysis logic to transform raw data into security findings.
• Develop detection rules and behavioral models for suspicious AI activity.
• Evaluate APIs, audit logs, and security controls provided by AI platforms.

Required qualifications

• Strong software engineering experience building production-quality backend services, cloud-native applications, data platforms, or security products.
• Hands-on programming experience in Python, Go, Java, Kotlin, or a comparable backend language.
• Experience designing and building scalable APIs, distributed systems, or data-processing pipelines.
• Strong data analysis skills and the ability to investigate complex behavior using SQL or other query languages.
• Familiarity with cloud infrastructure, SaaS platforms, identity systems, authentication, authorization, and OAuth.
• Understanding of security fundamentals, including identities, permissions, access controls, vulnerabilities, attack techniques, and risk assessment.
• Ability to translate ambiguous security risks into clear threat models, data requirements, and production capabilities.
• Strong engineering judgment across scalability, reliability, security, performance, maintainability, and cost.
• Curiosity and a willingness to rapidly learn unfamiliar AI platforms, APIs, security models, and attack techniques.
• Ability to work independently while collaborating effectively with security researchers, product managers, and engineers.
• Strong written and verbal communication skills in English.

Nice to have

• Experience building cybersecurity, identity security, SaaS security, threat detection, SIEM, EDR, XDR, or security analytics products.
• Experience researching or developing protections for AI applications, large language models, copilots, or autonomous agents.
• Familiarity with AI security risks such as prompt injection, RAG poisoning, insecure tool use, model abuse, excessive agency, and sensitive-data disclosure.
• Experience with LLM application frameworks, agent protocols, tool integrations, vector databases, or retrieval-augmented generation systems.
• Experience working with SaaS audit logs, identity telemetry, OAuth grants, application configurations, or security events.
• Experience developing detection rules, behavioral analytics, risk models, or attack-path analysis.
• Experience with large-scale streaming or batch-processing technologies.
• Experience using machine learning or generative AI to analyze security data or automate investigations.
• Contributions to security research, open-source projects, technical publications, or responsible vulnerability disclosures.
• Experience collaborating with globally distributed engineering teams.

About the company

Obsidian Security is a global leader in cyber security protecting the SaaS and non-human identity layer modern enterprises run on. The company provides unified visibility into human and machine identities, apps, and integrations across SaaS estates.