Platform Security Engineer

About the role

The ASUS Robotics & AI Center is seeking a Platform Security Engineer to join its global R&D team. The role is central to building and maintaining the security posture of a cloud-based platform, covering application hardening, infrastructure security and secure scaling. It suits an experienced, self-directed engineer who can own security architecture end-to-end and guide others toward secure development.

Key responsibilities

• Own application and infrastructure security from production launch through long-term scaling.
• Harden authentication (OAuth/session handling) and API authorization, including multi-tenant access control.
• Configure and maintain IAM policies, service accounts and least-privilege access controls.
• Secure data flows such as file uploads, signed URLs, database access and secrets management.
• Set up and maintain security monitoring, logging and alerting.
• Build and maintain security tooling in CI/CD pipelines, including SAST, DAST and dependency scanning.
• Perform regular security assessments, dependency audits and penetration testing.
• Respond to security incidents and carry out root cause analysis.
• Guide the engineering team on secure development and document security controls and incident response procedures.

Required profile

• Bachelor's degree or higher in computer science, information security or a related field.
• 7+ years of experience in application or infrastructure security roles.
• Proven experience securing production web applications, preferably in Node.js/Next.js environments.
• Strong verbal and written communication, able to document controls and guide non-security engineers.
• Penetration testing experience is a plus.

Required skills

• Cloud security on GCP or equivalent (IAM, VPC, IAP, Secret Manager, Cloud Armor).
• OAuth, session security and multi-tenant authorization.
• SAST, DAST and dependency scanning tools integrated into CI/CD.
• Terraform security hardening.