Application Security Engineer
Job Summary
Job Description
As an Application Security Engineer at Immutable, you'll be a crucial part of ensuring the security of their platform. Responsibilities include operating and improving the vulnerability management program, automating security controls, conducting security assessments and application reviews, collaborating with engineering teams to integrate security best practices, and supporting security research initiatives. You'll work closely with engineering teams to mitigate risks and improve security processes, reporting to the Head of Security. The role demands strong knowledge of web application vulnerabilities, proficiency in programming languages (e.g., Python, Golang), and experience in application security, vulnerability management, or automation. Familiarity with DevOps security principles is also essential.
Must have:
- Strong knowledge of web application vulnerabilities
- Proficiency in programming languages (Python, Golang)
- Experience in application security, vulnerability management, or automation
- Familiarity with DevOps security principles (K8s, AWS, Terraform)
Perks:
- Globally competitive salaries and Employee Stock Options
- Flexible working model (hybrid)
- $500 WFH allowance
- $600 annual internet/phone allowance
- $1350 annual allowance for professional development
- Free Udemy courses
- $800 annual health and wellbeing allowance
- 24/7 access to employee assistance program
- Discounted ClassPass membership
- 12 weeks paid parental leave (gender-neutral)
- Additional leave for miscarriage and IVF treatments
- 2 extra paid annual leave days + birthday off
8 skills required
Job Details
About Us 🚀
Immutable is a global technology company, powering the leading platform for building games on Ethereum. We are on a mission to build the future of gaming by redefining how games are played and discovered. Founded in 2018, Immutable is one of the fastest Australian companies to hit unicorn status, having raised more than AUD $300M+ and a valuation of AUD $3.5 billion.
Currently, the Immutable Group consists of the Immutable Platform, the leading platform for building games on Ethereum powering successful games like RavenQuest and Immortal Rising 2, and Immutable Games, a global leader in web3 game development and publishing with leading titles Gods Unchained and Guild of Guardians.
Our ambition is to make digital worlds real; we have incredible global growth plans as the fastest growing gaming chain in 2024 with 250+ games signed, more than in all previous years combined. 🚀
About The Role 🤔
At Immutable, security is at the core of what we do. As an Application Security Engineer, you will play a pivotal role in ensuring our products are safe for everyone to use. You will focus on implementing and maintaining security controls while balancing user experience and operational efficiency.
This role is crucial in supporting our security operations and vulnerability management program. You will work closely with engineering teams to mitigate risks and improve security processes. You will report to our Head of Security and be a key player in safeguarding Immutable's ecosystem.
You'll Be Empowered To 🎮
- Operate and improve our vulnerability management program by identifying, triaging, and mitigating security risks across our platform
- Automate security controls to ensure efficient and effective detection, response, and remediation of vulnerabilities
- Conduct security assessments and application reviews, identifying weaknesses and ensuring best practices in web application security
- Collaborate with engineering teams to integrate security best practices into development lifecycles
- Support security research initiatives, including bug bounty programs and responsible disclosure processes
We'd Love You To Bring 🤝
- Strong knowledge of web application vulnerabilities and their exploitation methods (e.g., OWASP Top 10)
- Proficiency in one or more programming languages (e.g., Python, Golang) to automate security tasks and improve workflows
- A curious mindset and passion for security, demonstrated through self-driven learning, research, or hands-on experience in security projects
- Extensive experience in security roles, with a focus on application security, vulnerability management, or automation
- Familiarity with DevOps security principles, including Kubernetes (K8s), AWS, Terraform, and infrastructure-as-code security practices
- Experience in triaging and analyzing security vulnerabilities, such as through bug bounty programs or responsible disclosures
We are proud of the benefits that we offer for all of our employees globally. Here is a snapshot:
Attracting the best global talent:
💸 We commit to paying globally competitive salaries and contributions & we share our products' success through Employee Stock Options. We also support our US Employees with Medical and 401K Insurance
💻 Our flexible working model blends the best of both worlds: Sydney-based employees enjoy three days a week in our vibrant head office, while remote team members can work from home or utilise access to global office hubs via a WeWork All-Access pass
📲 We offer USD $500 WFH allowance to set up your home office and USD $600 per annum to put toward your internet and phone usage.
Levelling up your growth
🌱 We offer up to USD $1,350 per annum for any classes, courses or events to support your growth and development
📚 Enjoy access to free online courses via Udemy
Helping you thrive
💆🏽♀️ Enjoy USD $800 per year to put toward your health and wellbeing
🤗 Get 24/7 access to unlimited counselling for you and your family when you need it through our EAP Service
🎁 Monthly subsidy and discounted rate with ClassPass, including a 1-year free membership to Breethe
Leave when you need it the most:
👨👧👦 New parents receive 12 weeks of paid leave in our gender-neutral offer. The birthing parent also gets an additional six weeks of leave for rest and recovery leading up to and after birth. We also offer Miscarriage Leave and extra leave for IVF treatments
🎂 Enjoy 2 additional paid annual leave days at the end of the year and a paid day off for your birthday
Additional Information:
Immutable is committed to building and fostering an inclusive, diverse workplace. We believe in incorporating everyone's perspectives and experiences as this has been a significant driver of our success so far.
We are a 2025 Circle Back Initiative Employer – we commit to responding to every applicant.
*A note to recruitment agencies: Our internal team has this role covered, so there is no need to reach out - We don't accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes. Thank you!
Join us in shaping the future of web3 gaming!
#LI-Remote
Similar Jobs
NVIDIA
Tel Aviv-Yafo, Tel Aviv District, Israel (On-Site)
• 3 Months ago
The Walt Disney Company
London, England, United Kingdom (On-Site)
• 2 Months ago
Thousand Eyes
San Francisco, California, United States (On-Site)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
Zeta
Bengaluru, Karnataka, India (On-Site)
• 7 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Sydney, New South Wales, Australia
Canva
Surry Hills, New South Wales, Australia (Remote)
• 2 Months ago
The Walt Disney Company
Sydney, New South Wales, Australia (On-Site)
• 6 Months ago
Canva
Melbourne, Victoria, Australia (Remote)
• 1 Month ago
Canva
Brisbane, Queensland, Australia (Remote)
• 1 Month ago
bazzar voice
Sydney, New South Wales, Australia (Hybrid)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
PwC
Dublin, County Dublin, Ireland (On-Site)
• 8 Months ago
Assystems
Gurugram, Haryana, India (On-Site)
• 7 Months ago
Get notifed when new similar jobs are uploaded
