Description

Job Description Overview:

The ASUS Robotics & AI Center is seeking a Platform Security Engineer to join our global research and development team. This role contributes to the security posture of our cloud-based platform, spanning application hardening, infrastructure security, and the day-to-day practices that keep our systems secure as they scale.

We are looking for an engineer with hands-on experience in application and cloud security, a proactive mindset for identifying and mitigating risk, and the ability to collaborate effectively across a multidisciplinary engineering team. The ideal candidate is a strong individual contributor who is eager to deepen their expertise in security architecture while working alongside experienced engineers across our Boston and Taipei offices.

Essential Duties and Responsibilities:

• Contribute to application and infrastructure security across the platform, supporting production launch and long-term scaling.
• Help harden authentication (OAuth/session handling) and API authorization patterns, including multi-tenant access control.
• Configure and maintain IAM policies, service accounts, and least-privilege access controls across cloud infrastructure.
• Secure data flows including file uploads, signed URLs, database access, and secrets management.
• Set up and maintain security monitoring, logging, and alerting systems.
• Build and maintain security tooling integrated into CI/CD pipelines, including SAST, DAST, and dependency scanning.
• Perform regular security assessments, dependency audits, and penetration testing.
• Support incident response and contribute to root cause analysis.
• Collaborate with the engineering team on secure development practices and help document security controls and incident response procedures.

Knowledge and Skills:

• Familiarity with cloud security on GCP or equivalent platforms, including IAM, VPC, IAP, Secret Manager, and Cloud Armor.
• Solid understanding of OAuth, session security, and multi-tenant authorization patterns.
• Experience with security scanning tools (SAST, DAST, dependency scanning) and integrating them into CI/CD workflows.
• Ability to work confidently in a rapidly changing, fast-paced and results-oriented corporate environment where a high degree of flexibility is required
• Excellent written and verbal communication skills in English

Required Qualifications:

Years of Education

• Bachelor's degree or higher in computer science, information security, or a related field.

Work Experience

• 8+ years of experience in application or infrastructure security roles.
• Hands-on experience securing production web applications, preferably in Node.js/Next.js environments.

Preferred Qualifications:

• Experience with Terraform security hardening is a plus.
• Strong verbal and written communication skills, including the ability to document security controls clearly.
• Penetration testing experience is a plus.
• Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week.

Working Conditions:

• Typically working in an office environment
• This is an IN-OFFICE position in Boston, MA
• Requires sitting, operating a computer keyboard, telephone and other office equipment for extended periods of time

• Travel requirements 10% travel, domestic/international

$164,000 - $237,000 annually is the estimated pay range for this role working in Boston, Massachusetts office. The final amount will be determined based on qualifications & experience of the candidate relative to the role. Our comprehensive employee benefits include bonuses, medical, dental, vision, life insurance, AD&D insurance, Paid Time Off, EAP, & 401(k).