Senior Technical Security Engineer – Cloud & Application Security

About the role

We are seeking a Senior Technical Security Engineer to protect our high‑traffic e‑commerce platform in Taiwan. You will lead cloud and application security initiatives, ensuring our services remain safe for millions of users.

Key responsibilities

• Collaborate on secure software development processes, define security requirements, review architecture and code, and provide vulnerability guidance.
• Conduct web security assessments and ensure compliance with standards such as PCI DSS.
• Develop and maintain scalable security strategies and policies for public cloud platforms (AWS, GCP).
• Drive company‑wide adoption of cloud and compute security policies and design tools to detect misconfigurations.
• Evaluate, prioritize, and remediate vulnerabilities across cloud environments while maintaining continuous monitoring.
• Monitor security alerts, respond to incidents, and provide thorough incident analysis.
• Identify security risks and recommend improvement plans to enhance overall resilience.

Required profile

• Bachelor’s or Master’s degree in a STEM field or equivalent experience.
• 3+ years of experience in application programming, DevOps, or the software development life cycle.
• Strong knowledge of web security vulnerabilities and counter‑measures, including the OWASP Top 10.
• Familiarity with security features and best practices of major cloud platforms (AWS, GCP).
• Excellent communication and collaboration skills across diverse technical teams.

Required skills

• AWS
• Google Cloud Platform (GCP)
• OWASP Top 10
• Java, PHP, Python, or Shell scripting
• Linux and Windows Server security management
• Container and cloud infrastructure security concepts
• Firewall, Web Application Firewall (WAF), SIEM, Endpoint Security
• PCI DSS compliance knowledge