Senior Platform Security Engineer

Job Description Overview: The ASUS Robotics & AI Center is seeking a Platform Security Engineer to join our global research and development team. This role contributes to the security posture of our cloud-based platform, spanning application hardening, infrastructure security, and the day-to-day practices that keep our systems secure as they scale. We are looking for an engineer with hands-on experience in application and cloud security, a proactive mindset for identifying and mitigating risk, and the ability to collaborate effectively across a multidisciplinary engineering team. The ideal candidate is a strong individual contributor who is eager to deepen their expertise in security architecture while working alongside experienced engineers across our Boston and Taipei offices. Essential Duties and Responsibilities: - Contribute to application and infrastructure security across the platform, supporting production launch and long-term scaling. - Help harden authentication (OAuth/session handling) and API authorization patterns, including multi-tenant access control. - Configure and maintain IAM policies, service accounts, and least-privilege access controls across cloud infrastructure. - Secure data flows including file uploads, signed URLs, database access, and secrets management. - Set up and maintain security monitoring, logging, and alerting systems. - Build and maintain security tooling integrated into CI/CD pipelines, including SAST, DAST, and dependency scanning. - Perform regular security assessments, dependency audits, and penetration testing. - Support incident response and contribute to root cause analysis. - Collaborate with the engineering team on secure development practices and help document security controls and incident response procedures. Knowledge and Skills: - Familiarity with cloud security on GCP or equivalent platforms, including IAM, VPC, IAP, Secret Manager, and Cloud Armor. - Solid understanding of OAuth, session security, and multi-tenant authorization patterns. - Experience with security scanning tools (SAST, DAST, dependency scanning) and integrating them into CI/CD workflows. - Ability to work confidently in a rapidly changing, fast-paced and results-oriented corporate environment where a high degree of flexibility is required - Excellent written and verbal communication skills in English Required Qualifications: Years of Education - Bachelor's degree or higher in computer science, information security, or a related field. Work Experience - 8+ years of experience in application or infrastructure security roles. - Hands-on experience securing production web applications, preferably in Node.js/Next.js environments. Preferred Qualifications: - Experience with Terraform security hardening is a plus. - Strong verbal and written communication skills, including the ability to document security controls clearly. - Penetration testing experience is a plus. - Flexibility to attend virtual meetings with the Taiwan-based team at least three nights per week. Working Conditions: - Typically working in an office environment - This is an IN-OFFICE position in Boston, MA - Requires sitting, operating a computer keyboard, telephone and other office equipment for extended periods of time - Travel requirements 10% travel, domestic/international $164,000 - $237,000 annually is the estimated pay range for this role working in Boston, Massachusetts office. The final amount will be determined based on qualifications & experience of the candidate relative to the role. Our comprehensive employee benefits include bonuses, medical, dental, vision, life insurance, AD&D insurance, Paid Time Off, EAP, & 401(k). ASUS is an equal employment opportunity employer. The Company makes employment decisions without regard to race, color, religion, sex, gender, pregnancy/ breastfeeding, medical conditions related to pregnancy or childbirth, sexual orientation, age, national origin or ancestry, physical or mental disability, medical con…