Job description

Job Description Overview: The ASUS Robotics & AI Center is seeking a Platform Security Engineer to join our global research and development team. This role contributes to the security posture of our cloud-based platform, spanning application hardening, infrastructure security, and the day-to-day practices that keep our systems secure as they scale. We are looking for an engineer with hands-on experience in application and cloud security, a proactive mindset for identifying and mitigating risk, and the ability to collaborate effectively across a multidisciplinary engineering team. The ideal candidate is a strong individual contributor who is eager to deepen their expertise in security architecture while working alongside experienced engineers across our Boston and Taipei offices. Essential Duties and Responsibilities: • Contribute to application and infrastructure security across the platform, supporting production launch and long-term scaling. • Help harden authentication (OAuth/session handling) and API authorization patterns, including multi-tenant access control. • Configure and maintain IAM policies, service accounts, and least-privilege access controls across cloud infrastructure. • Secure data flows including file uploads, signed URLs, database access, and secrets management. • Set up and maintain security monitoring, logging, and alerting systems. • Build and maintain security tooling integrated into CI/CD pipelines, including SAST, DAST, and dependency scanning. • Perform regular security assessments, dependency audits, and penetration testing. • Support incident response and contribute to root cause analysis. • Collaborate with the engineering team on secure development practices and help document security controls and incident response procedures. Knowledge and Skills: • Familiarity with cloud security on GCP or equivalent platforms, including IAM, VPC, IAP, Secret Manager, and Cloud Armor. • Solid understanding of OAuth, session security, and multi-tenant authorization patterns. • Experience with security scanning tools (SAST, DAST, dependency scanning) and integrating them into CI/CD workflows. • Ability to work confidently in a rapidly changing, fast-paced and results-oriented corporate environment where a high degree of flexibility is required • Excellent written and verbal communication skills in English Required Qualification s : Years of Education • Bachelor's degree or higher in computer science, information security, or a related field. Work Experience • 8+ years of experience in application or infrastructure security roles. • Hands-on experience securing production web applications, preferably in Node.js/Next.js environments. Preferred Qualifications: • Experience with Terraform security hardening is a plus. • Strong verbal and written communication skills, including the ability to document security controls clearly. • Penetration testing experience is a plus. • Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week. Working Conditions : • Typically working in an office environment • This is an IN-OFFICE position in Boston, MA • Requires sitting, operating a computer keyboard, telephone and other office equipment for extended periods of time • T ravel requirements 10% travel , domestic/international $164,000 - $237,000 annually is the estimated pay range for this role working in Boston , Massachusetts office. The final amount will be determined based on qualifications & experience of the candidate relative to the role. Our comprehensive employee benefits include bonuses, medical, dental, vision, life insurance, AD&D insurance, Paid Time Off, EAP, & 401(k). ASUS is an equal employment opportunity employer. The Company makes employment decisions without regard to race, color, religion, sex, gender, pregnancy/ breastfeeding, medical conditions related to pregnancy or childbirth, sexual orientation, age, national origin or ancestry, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, as well as any other characteristic protected by law, regulation or local ordinance, and strives to comply with all applicable laws on the subject. These employment decisions extend to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment, pay and other forms of compensation, training and other terms and conditions of employment. About the ASUS Robotics & AI Center The ASUS Robotics and AI Center is a world-class research and development laboratory that was established with the mission of developing ambitious technologies that will define the future. Our multidisciplinary team of the brightest engineers and scientists is dedicated to creating software-focused solutions that will solve some of the most enduring challenges in the fields of robotics and artificial intelligence. More About ASUS ASUS is a global technology leader that provides the world’s most innovative and intuitive devices, components, and solutions to deliver incredible experiences that enhance the lives of people everywhere. With its team of 5,000 in-house R&D experts, the company is world-renowned for continuously reimagining today’s technologies. Consistently ranked as one of Fortune’s World’s Most Admired Companies, ASUS is also committed to sustaining an incredible future. The goal is to create a net-zero enterprise that helps drive the shift towards a circular economy, with a responsible supply chain creating shared value for every one of us.

Requirements

Must-haves

Contribute to application and infrastructure security across the platform, supporting production launch and long-term scaling.
Help harden authentication (OAuth/session handling) and API authorization patterns, including multi-tenant access control.
Configure and maintain IAM policies, service accounts, and least-privilege access controls across cloud infrastructure.
Secure data flows including file uploads, signed URLs, database access, and secrets management.
Set up and maintain security monitoring, logging, and alerting systems.
Build and maintain security tooling integrated into CI/CD pipelines, including SAST, DAST, and dependency scanning.
Perform regular security assessments, dependency audits, and penetration testing.
Support incident response and contribute to root cause analysis.
Collaborate with the engineering team on secure development practices and help document security controls and incident response procedures.
Familiarity with cloud security on GCP or equivalent platforms, including IAM, VPC, IAP, Secret Manager, and Cloud Armor.
Solid understanding of OAuth, session security, and multi-tenant authorization patterns.
Experience with security scanning tools (SAST, DAST, dependency scanning) and integrating them into CI/CD workflows.
Ability to work confidently in a rapidly changing, fast-paced and results-oriented corporate environment where a high degree of flexibility is required
Excellent written and verbal communication skills in English
Years of Education
Bachelor's degree or higher in computer science, information security, or a related field.
Work Experience
8+ years of experience in application or infrastructure security roles.
Hands-on experience securing production web applications, preferably in Node.js/Next.js environments.
Typically working in an office environment

Nice-to-haves

Experience with Terraform security hardening is a plus.
Strong verbal and written communication skills, including the ability to document security controls clearly.
Penetration testing experience is a plus.
Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiapici/cdgcpnode.jsnext.js

Platform: jobvite
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off