Senior Platform Security Engineer

Asus•Boston, MA

5d•Onsite

About The Position

The ASUS Robotics & AI Center is seeking a Platform Security Engineer to join our global research and development team. This role contributes to the security posture of our cloud-based platform, spanning application hardening, infrastructure security, and the day-to-day practices that keep our systems secure as they scale. We are looking for an engineer with hands-on experience in application and cloud security, a proactive mindset for identifying and mitigating risk, and the ability to collaborate effectively across a multidisciplinary engineering team. The ideal candidate is a strong individual contributor who is eager to deepen their expertise in security architecture while working alongside experienced engineers across our Boston and Taipei offices.

Requirements

Familiarity with cloud security on GCP or equivalent platforms, including IAM, VPC, IAP, Secret Manager, and Cloud Armor.
Solid understanding of OAuth, session security, and multi-tenant authorization patterns.
Experience with security scanning tools (SAST, DAST, dependency scanning) and integrating them into CI/CD workflows.
Ability to work confidently in a rapidly changing, fast-paced and results-oriented corporate environment where a high degree of flexibility is required
Excellent written and verbal communication skills in English
Bachelor's degree or higher in computer science, information security, or a related field.
8+ years of experience in application or infrastructure security roles.
Hands-on experience securing production web applications, preferably in Node.js/Next.js environments.

Nice To Haves

Experience with Terraform security hardening is a plus.
Strong verbal and written communication skills, including the ability to document security controls clearly.
Penetration testing experience is a plus.
Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week.

Responsibilities

Contribute to application and infrastructure security across the platform, supporting production launch and long-term scaling.
Help harden authentication (OAuth/session handling) and API authorization patterns, including multi-tenant access control.
Configure and maintain IAM policies, service accounts, and least-privilege access controls across cloud infrastructure.
Secure data flows including file uploads, signed URLs, database access, and secrets management.
Set up and maintain security monitoring, logging, and alerting systems.
Build and maintain security tooling integrated into CI/CD pipelines, including SAST, DAST, and dependency scanning.
Perform regular security assessments, dependency audits, and penetration testing.
Support incident response and contribute to root cause analysis.
Collaborate with the engineering team on secure development practices and help document security controls and incident response procedures.