17 hours ago
Taipei, TaiwanSenior
Responsibilities
- Design, implement, and maintain secure CI/CD pipelines with automated SAST, DAST, SCA, secrets scanning, and IaC scanning.
- Establish the Secure Software Development Lifecycle and embed security from design and threat modeling through deployment and runtime.
- Define security requirements analysis and threat modeling practices.
- Develop Policy as Code solutions for automated compliance and governance checks.
- Conduct pre-production security assessments, vulnerability assessments, and penetration testing.
- Implement security practices for infrastructure-as-code and cloud-native environments.
- Build and maintain security monitoring, log aggregation, and alerting systems for detection and response.
- Assess and mitigate risks from LLM applications, AI agents, prompt injection, AI data leakage, model supply chains, and AI-assisted development.
- Partner with engineering teams to evaluate and govern AI-powered development tools securely and compliantly.
Requirements
- At least 4 years of experience in cybersecurity, DevSecOps, or software development.
- Solid understanding of the Secure Software Development Lifecycle and modern application security practices.
- Hands-on experience with software product engineering, deployment, and system integration.
- Practical experience using AI automation or AI agents such as Claude Code, Cursor, GitHub Copilot, Claude, ChatGPT, or custom workflows.
- Ability to evaluate product performance metrics, diagnose issues, and drive resolution.
- Strong communication and collaboration skills across engineering and business teams.
- Preferred: BS or MS in Computer Science or a related field.
- Preferred: CISSP, CCSP, SSCP, CSSLP, CC, CISM, CEH, or other relevant security certification.
- Preferred: experience with ISO 27001, SOC 2, blue-team operations, threat hunting, red-blue team exercises, or CTF competitions.
- Preferred: experience establishing SSDLC processes and familiarity with AI security frameworks and AI/ML pipeline security.
Categories
About Appier
Appier builds AI-driven advertising and marketing software for enterprises, offering programmatic ad bidding, customer data, and predictive tools delivered as SaaS. Founded in 2012 and headquartered in Taipei, it is a public company listed on the Tokyo Stock Exchange (ticker: 4180). Its Ad Cloud processes millions of bid requests per second across APAC, Europe, and the U.S., and is used by in-house and agency marketers.