Senior Product Security Engineer: AI Tools & Web3

Immutable; Sydney; Hybrid; AUD 180,000 - 270,000; Full time

Benefits offered by this job

Hybrid work model

Lunch provided

USD 500 WFH allowance

USD 600 internet/phone allowance

Novated leasing and car benefits

Udemy courses for growth

ClassPass membership

Job summary

Immutable is seeking a Security Engineer to join a five-person security team, reporting to the Head of Security. You will work closely with product engineering to model threats, review services, and fix vulnerabilities before production, targeting 80% remediation before release.

The role combines web apps, APIs, and blockchain components with a strong focus on automated tooling. The position offers a hybrid Sydney-based work model with remote options and global office access, plus a

Qualifications

• Proven experience in finding and fixing security vulnerabilities in production
• Strong ability to explain root causes of security issues and implement fixes
• Experience building and reviewing security tooling and automation

Responsibilities

• Own vulnerability management program including Bugcrowd and Immunefi and fix prioritization
• Own AI agents that review PRs for security issues and triage bugs
• Develop a security context layer to aid triage and automated fixes
• Maintain up-to-date threat models and attack graphs as product evolves

Skills

Application security depth

AWS security

GCP security

AI tooling experience

Threat modeling

Software engineering

Tools

Bugcrowd platform

Immunefi

Threat modelling tools

AWS

Job description

Immutable is seeking a Security Engineer to join a five-person security team, reporting to the Head of Security. You will work closely with product engineering to model threats, review services, and fix vulnerabilities before production, targeting 80% remediation before release.

The role combines web apps, APIs, and blockchain components with a strong focus on automated tooling. The position offers a hybrid Sydney-based work model with remote options and global office access, plus a