Latest AI JobsBrowse Jobs
Obsidian Security logo

Product Security Engineer (AI & Platform Security) – Taiwan

Obsidian SecurityTaipei, TaiwanEngineering (D2010)
Apply on company site
Salary
Not listed
Job type
Full-time
Experience
Mid
Posted
6 Oct 2026
Status
Open · checked 7d ago

About this role

Obsidian Security is hiring a Product Security Engineer for AI and Platform Security to work in Taipei, Taiwan. This hands-on engineering position suits a professional focused on safeguarding software supply chains, cloud infrastructure, and AI-driven systems throughout the product lifecycle.

Role Overview

The Product Security Engineer focuses on strengthening the security posture of platform infrastructure, backend services, and development pipelines. Responsibilities cover safeguarding customer information, implementing secure defaults across cloud environments, and establishing safeguards for internal and product-level AI workflows.

Key Responsibilities

Develop security mechanisms directly within products, backend services, and cloud environments, addressing tenant isolation, authentication, service identity, and logging.
Protect user data across storage, processing, and collection through encryption, access controls, and strict key management practices.
Design and secure infrastructure-as-code deployments on AWS and GCP platforms utilizing managed services, IAM controls, and Kubernetes.
Perform security architecture evaluations for APIs, data pipelines, and services that incorporate artificial intelligence and agents.
Establish code-level guardrails for AI and agent workflows, focusing on data-leakage prevention and least-privilege tool access.
Integrate automated security tooling into CI/CD pipelines, including static analysis, container scans, and dependency checks.
Manage vulnerability lifecycles through exposure analysis, prioritization, patching, and testing.
Review source code and guide engineering teams on secure coding methodologies.

Requirements

Demonstrated background in product security or related domains with a history of deploying code-based security enhancements.
Comprehensive understanding of application security vulnerabilities and secure software development principles.
Proficiency in software development using languages such as Python, Go, Java, Kotlin, or TypeScript.
Practical experience building and securing cloud applications on platforms like AWS or GCP.
Expertise in securing distributed systems, microservices, APIs, and cloud SaaS products with end-to-end data protection.
Experience handling CVE tracking and remediation across infrastructure and dependencies.
Proficiency in English communication to facilitate cross-regional collaboration.

Nice to Have

Background in securing LLM applications, AI systems, or tool-permission models.
Prior involvement with identity security or cybersecurity products.
Understanding of software supply chain security.
Familiarity with NIST, OWASP, and CVSS frameworks.
Exposure to SOC 2 or ISO 27001 compliance standards.
Experience in penetration testing or vulnerability research.
Proficiency in Mandarin.

Skills and Tools

Python
Go
Java
Kotlin
TypeScript
AWS
GCP
Kubernetes
CI/CD Pipelines

About the Company

Obsidian Security provides cyber security solutions protecting SaaS platforms and non-human identities for enterprise organizations. Recognized as a startup employer, the company provides unified visibility into SaaS estates, detects supply chain and identity-based attacks, and enforces least-privilege access.

How to Apply

Interested candidates should visit the official company careers page to submit an application for this role.

Skills and tech stack

PythonGoJavaKotlinTypeScriptAWSGCPKubernetesLLMDistributed Systems

Questions candidates ask

Where is the position located?

The role is located in Taipei, Taiwan.

What kind of engineering work is involved?

This is a hands-on engineering role where you design and build security features directly into backend services, cloud infrastructure, and AI systems rather than only reviewing them.

What cloud platforms are used in this role?

The position involves securing services built on cloud-native platforms, primarily AWS and GCP.

Are AI security skills required?

Securing AI/LLM applications or agent systems is listed as a nice-to-have qualification rather than a mandatory requirement.

How should I apply for the job?

Applicants should apply directly on the official company careers page.

Ready to apply?

The application is on the official Obsidian Security careers page.

Apply on company site