Senior Product Security Engineer – Taiwan

About the role

Obsidian Security is seeking a Senior Product Security Engineer to strengthen the security of its SaaS security platform. You will work across the full product lifecycle, from architecture and implementation to deployment and production operations, collaborating with teams in Taiwan, the US, the UK, and Australia.

Key responsibilities

• Perform security architecture and design reviews for new products, services, APIs, data pipelines, and infrastructure components.
• Lead end‑to‑end CVE management, including exposure analysis, risk assessment, remediation, testing, deployment, and validation.
• Improve CI/CD pipelines with automated security controls such as dependency scanning, static analysis, container scanning, IaC scanning, and secrets detection.
• Develop and maintain software supply‑chain security controls covering source code, open‑source dependencies, build systems, artifacts, containers, and deployment workflows.
• Design and build security features for backend services, APIs, and cloud infrastructure, including reusable security libraries and developer tools.
• Mentor engineers on product security, secure architecture, vulnerability remediation, and software supply‑chain security.

Required profile

• Significant experience in product security, application security, or cloud security.
• Deep knowledge of secure software development and common application security risks.
• Strong hands‑on software engineering skills in languages such as Python, Go, Java, Kotlin, or TypeScript.
• Experience securing cloud‑native SaaS products, distributed systems, APIs, microservices, and data‑processing platforms.
• Proven ability to assess vulnerability exploitability, business impact, and remediation options.

Required skills

• Python
• Go
• Java
• Kotlin
• TypeScript
• SAST and DAST tools
• Software composition analysis
• Container scanning
• Secrets detection
• Infrastructure‑as‑code scanning
• Kubernetes
• Cloud security concepts