Job Description
We are seeking an experienced Security Engineer to join our growing security team. This role involves strengthening cybersecurity across various stages of product development and collaborating with software development teams. Responsibilities include designing and implementing secure CI/CD pipelines, establishing security scanning tools (SAST, DAST), developing Policy as Code, and driving secure software development lifecycle processes. You will also define security requirements, conduct threat modeling, perform pre-production security assessments and penetration testing, and implement security best practices for Infrastructure as Code. The role also requires setting up security monitoring, log aggregation, and alerting systems, as well as performing vulnerability assessments.
Good To Have:
- BS/MS in computer science
- Relevant security certifications (CISSP, CCSP, SSCP, CSSLP, CC, CISM, CEH, etc.)
- Experience in compliance management (ISO 27001, SOC2)
- Blue team experience (SOC operations, threat hunting)
- Experience in red-blue team exercises
- Experience in SSDLC process design and implementation
- Familiarity with security integration in agile development environments
- Strong English reading and communication skills
Must Have:
- Minimum 3 years of cybersecurity experience, DevOps, or software development
- Knowledge of the SSDLC
- Extensive experience in software product engineering, deployment, and integration
- Ability to evaluate product performance metrics and resolve issues
- Ability to stay updated with technical product development advancements
- Exceptional communication and interpersonal skills
About the role
We are seeking a Security Engineer to join our growing security team. We are creating more services that use AI technology to generate tremendous value for the world, and with the incredible speed of our customer growth, we need experienced and intelligent talent to strengthen cybersecurity across various stages of product development and collaborate with software development teams. You will also be responsible for information security and integration work within the group.
Responsibilities
- Design and implement secure CI/CD pipelines with automated security checks integrated into development workflows
- Establish and maintain security scanning tools, including SAST, DAST, dependency scanning, and more
- Develop Policy as Code solutions to enable automated compliance checks
- Establish and drive secure software development lifecycle processes, ensuring security is considered at every development stage
- Define security requirements analysis and threat modeling standards to identify potential security risks during the design phase
- Integrate Static Application Security Testing (SAST) into development IDEs and CI/CD processes
- Conduct pre-production security assessments and penetration testing
- Create security deployment checklists and production environment security monitoring
- Implement security best practices for Infrastructure as Code (IaC)
- Set up and maintain security monitoring, log aggregation, and alerting systems
- Perform vulnerability assessments and penetration testing
About you
[Minimum qualifications]
- Minimum 3 years of experience in cybersecurity field, DevOps or software development
- Knowledge of the SSDLC
- Extensive experience in software product engineering, deployment, and integration
- Ability to evaluate product performance metrics, as well as diagnose and resolve issues
- Ability to keep up with advancements in the field of technical product development
- Exceptional communication and interpersonal skills
[Preferred qualifications]
- BS/MS in computer science
- Hold relevant security certifications (CISSP, CCSP, SSCP, CSSLP, CC, CISM, CEH, etc.)
- Experience in compliance management (ISO 27001, SOC2)
- Blue team experience, including SOC operations or threat hunting
- Experience participating in red-blue team exercises or competitions
- Experience in SSDLC process design and implementation
- Familiar with security integration in agile development environments
- Strong English reading and communication skills
#LI-CS1
Set alerts for more jobs like Security Engineer
Set alerts for new jobs by appier
Set alerts for new Cyber Security jobs in Taiwan
Set alerts for new jobs in Taiwan
Set alerts for Cyber Security (Remote) jobs
