AI Security Engineer - Taiwan
Obsidian Security2 months ago
Taipei, TaiwanSenior
Responsibilities
- Research how enterprise AI platforms and agentic frameworks authenticate, access data, request permissions, and interact with corporate SaaS applications.
- Research emerging AI security threats and develop threat models covering applications, agents, models, integrations, identities, permissions, tools, and data flows.
- Design data models for AI assets, identities, access relationships, permissions, activities, risks, and attack paths.
- Build production-grade AI security products, backend services, APIs, detection capabilities, and remediation features.
- Build scalable pipelines that ingest, normalize, enrich, correlate, and analyze high-volume security telemetry.
- Write queries and analysis logic that convert activity and configuration data into actionable security findings.
- Develop detection rules and behavioral models for suspicious AI and agentic activity.
- Evaluate AI platform APIs, audit logs, authentication mechanisms, OAuth permissions, and security controls.
- Work with product teams and customers to turn ambiguous security problems into practical product capabilities.
- Partner with Security Research, Detection Engineering, platform, and SRE teams to validate threats and improve detection coverage.
- Contribute to technical designs, code reviews, testing strategies, operational readiness, engineering standards, and long-term AI security strategy.
- Improve engineering productivity, pipeline performance, development velocity, and cloud cost efficiency.
Requirements
- Strong software engineering experience building production-quality backend services, cloud-native applications, data platforms, or security products.
- Hands-on programming experience in Python, Go, Java, Kotlin, or a comparable backend language.
- Experience designing and building scalable APIs, distributed systems, or data-processing pipelines.
- Strong data analysis skills using SQL or other query languages to investigate complex behavior.
- Familiarity with cloud infrastructure, SaaS platforms, identity systems, authentication, authorization, and OAuth.
- Understanding of security fundamentals including identities, permissions, access controls, vulnerabilities, attack techniques, and risk assessment.
- Ability to translate ambiguous security risks into threat models, data requirements, and production capabilities.
- Strong engineering judgment across scalability, reliability, security, performance, maintainability, and cost.
- Experience or interest in rapidly learning unfamiliar AI platforms, APIs, security models, and attack techniques.
- Ability to work independently and collaborate with security researchers, product managers, and engineers.
- Strong written and verbal communication skills in English.
- Preferred experience with cybersecurity, identity security, SaaS security, threat detection, SIEM, EDR, XDR, or security analytics products.
- Preferred experience researching or protecting AI applications, large language models, copilots, autonomous agents, LLM application frameworks, agent protocols, tool integrations, vector databases, or retrieval-augmented generation systems.
- Preferred experience with SaaS audit logs, identity telemetry, OAuth grants, application configurations, security events, detection rules, behavioral analytics, risk models, or attack-path analysis.
- Preferred experience with large-scale streaming or batch-processing technologies, machine learning, or generative AI for security analysis or investigation automation.
- Security research, open-source, technical publication, vulnerability disclosure, globally distributed-team, or Mandarin experience is a plus.
Benefits
- The role is based in Taiwan and involves collaboration with teams in Taiwan, the US, the UK, and Australia.
- Opportunity to work on emerging AI and agentic security problems and help shape the company’s long-term AI security strategy.
About Obsidian Security
Obsidian Security builds a SaaS security platform for enterprises to discover and govern third-party app and AI integrations, manage OAuth/API permissions, and detect and respond to identity and SaaS threats. It sells subscriptions to large regulated organizations; named customers include Snowflake, T-Mobile, and Algolia. Founded in 2017 and headquartered in Palo Alto, the privately held company focuses on Microsoft 365, Salesforce, and other major business apps.