Our company

  • Immutable

Your position

  • Senior Security Engineer (Product Security) — Join security team of five; work with product engineering teams to review new services, build threat models, and fix issues in code; own vulnerability management program (Bugcrowd/Immunefi) and AI PR review agents; maintain threat models, asset inventory, and attack graphs to enable triage with less human input; aim to fix 80% of vulnerabilities before production; report to Head of Security.

Requirements

  • Application security depth: identify and fix broken auth/injection bugs and explain root causes.
  • Capable software engineer who ships production code or builds tools; has built AI tooling (agents, automation, internal tools) and can discuss outcomes.
  • Solid AWS security experience (IAM, network controls, secrets, misconfigurations) with knowledge of GCP, detection/response; web3 knowledge useful but not required.
  • Side projects/open source work; willingness to work autonomously and assist other security areas when needed.
  • Bonus: Web3 experience (wallet, smart contract, dApp security); deeper detection/response experience; experience running a bug bounty program or findings pipeline end-to-end.

Compensation & benefits

  • Globally competitive base salaries; employee stock options (ESOP).
  • Hybrid/Sydney: 3 days/week in Sydney head office; remote work options and access to global office hubs via WeWork All-Access.
  • Daily lunch provided in Sydney office; USD $500 WFH setup allowance; USD $600 per year for internet/phone; USD $75 per quarter for remote team celebrations.
  • US medical and 401K insurance for US employees; novated leasing for Australian employees.
  • Up to USD $1,350 per year for classes, AI tooling or events; Udemy courses access; USD $800 per year for health and wellbeing; 24/7 counselling via EAP; ClassPass discounts; paid parental leave; additional two paid annual leave days; paid birthday leave.