Hybrid opportunity at
ImmutableSenior Security Engineer (Product Security)
Immutable is seeking a Senior Security Engineer to focus on product security within a security team of five, reporting directly to the Head of Security. The…
Career Tools
About This Role
Immutable is seeking a Senior Security Engineer to focus on product security within a security team of five, reporting directly to the Head of Security. The company builds full-stack gaming infrastructure, including an Ethereum layer-2 network, a player wallet called Passport, and marketing data platforms utilized by hundreds of games and industry leaders like Ubisoft. In this role, most of your time will be spent collaborating with product engineering teams…
Job Description
Immutable is seeking a Senior Security Engineer to focus on product security within a security team of five, reporting directly to the Head of Security. The company builds full-stack gaming infrastructure, including an Ethereum layer-2 network, a player wallet called Passport, and marketing data platforms utilized by hundreds of games and industry leaders like Ubisoft. In this role, most of your time will be spent collaborating with product engineering teams to review new services, construct threat models, and remediate code vulnerabilities before they reach production. The ideal candidate enjoys autonomy, works closely with software engineers, and is comfortable helping across other security areas when needed. This position does not suit someone who prefers merely reporting findings rather than actively fixing them.
Responsibilities
- Collaborate with product engineering groups to review new services and build threat models
- Identify and fix issues in service code to help reach the target of resolving 80 percent of vulnerabilities prior to production
- Manage the vulnerability management program, encompassing Bugcrowd and Immunefi bug bounties alongside scanning tool findings
- Maintain high SLA compliance for critical and high severity issues
- Operate AI agents that review pull requests for security risks and triage incoming bug reports
- Keep threat models and attack graphs up to date as the product evolves
Requirements
- Deep application security expertise with the ability to locate, explain, and properly fix broken auth flows or injection bugs
- Strong software engineering capability to ship production code, build custom tools, or fix issues in external services
- Demonstrated experience building your own AI tooling such as agents or automations
- Solid AWS security experience covering IAM, network controls, secrets management, and misconfiguration handling
Qualifications
- Knowledge of GCP security principles
- Background in detection and response
- Familiarity with web3 technologies including wallets, smart contracts, or decentralized applications
- Experience operating an end-to-end bug bounty program or findings pipeline
Core Skills
Benefits
- Globally competitive base salaries and contributions to a long-term fund
- Participation in Employee Stock Options
- USD 500 work-from-home allowance
- USD 600 per year for internet and phone costs
- USD 1350 annually for professional development, classes, courses, AI tooling, or events
- USD 800 per year for health and wellbeing
- Access to 24/7 unlimited employee assistance program counselling
- Monthly subsidy and discounted rate with ClassPass plus a free one-year membership to Breethe
- Paid parental leave
- Two additional paid annual leave days at the end of the year
- Paid day off for your birthday
- Local perks for Sydney employees including fresh daily lunches and hybrid office access, plus quarterly celebration awards
- Medical and 401K insurance support for US employees
- Novated leasing options for Australian employees
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this position?
The role utilizes a hybrid working model. Sydney-based staff work three days a week in the head office, while remote members work from home or use global office hubs via a WeWork All-Access pass.
Who does this position report to?
This role reports to the Head of Security and operates within a security team of five.
What is the salary for this role?
The specific salary amount is not stated in the job posting, though Immutable commits to paying globally competitive base salaries.
What employment type is this?
The posting specifies that this is a full-time position.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.