Obsidiansecurity
Product Security Engineer (AI & Platform Security) – Taiwan
Taipei, Taiwan. Posted a month ago
The role
You will design and build security features into backend services and cloud-native infrastructure. You will also secure AI and agent workflows and protect customer data throughout its lifecycle.
What you will do
- Build security features into products, backend services, and cloud infrastructure
- Secure customer data across its full lifecycle
- Design and secure services built on cloud-native platforms like AWS and GCP
- Conduct security architecture and design reviews for products, services, APIs, and infrastructure
- Secure AI and agent workflows and turn findings into code guardrails
- Strengthen CI/CD pipelines with automated security controls
- Lead CVE management including exposure analysis, risk assessment, and remediation
- Conduct code reviews and mentor engineers on secure development practices
Required qualifications
- Solid experience in product security or a related discipline
- Track record of shipping security improvements as code
- Deep knowledge of secure software development and common application security risks
- Strong software engineering skills in Python, Go, Java, Kotlin, TypeScript, or comparable languages
- Hands-on experience developing and securing applications on cloud-native services, such as AWS and/or GCP
- Experience securing cloud-native SaaS products, distributed systems, APIs, and microservices
- Practical CVE management experience across dependencies and infrastructure
- Strong English communication skills
Nice to have
- Experience securing AI/LLM applications or agent systems
- Cybersecurity or identity security product experience
- Software supply chain security knowledge
- Familiarity with OWASP, CVSS, and NIST standards
- Experience with compliance frameworks such as SOC 2 or ISO 27001
- Penetration testing or vulnerability research background
- Mandarin proficiency
About the company
Obsidian Security is a global leader in cyber security protecting the SaaS and non-human identity layer. The company provides unified visibility into human and machine identities, apps, and integrations across SaaS estates.