Senior Security Engineer (Product Security)

Location: Sydney, Australia; hybrid, with Sydney-based employees working from the office 3 days per week.

Company

hirify.global builds a game platform with products for game studios, including a marketing data platform, blockchain infrastructure, an Ethereum layer-2 network, and a digital-asset wallet.

What you will do

• Own the vulnerability management program, including Bugcrowd and Immunefi bug bounties and findings from scanning tools, targeting 90%+ SLA compliance for critical and high-severity issues.
• Work with product engineering teams to review new services, build threat models, and fix security issues in production code.
• Build and own AI agents that review pull requests for security issues and triage incoming bugs.
• Develop a security context layer using threat models, asset inventory, and past findings to help agents triage issues and propose fixes.
• Keep threat models and attack graphs current as products change.

Requirements

• Strong application security expertise, including identifying broken authentication flows and injection vulnerabilities, explaining root causes, and implementing proper fixes.
• Software engineering capability with experience shipping production code, fixes in existing services, or tools built from scratch.
• Experience building AI tooling such as an agent, automation, or internal tool, with the ability to explain what worked, what did not, and how results were evaluated.
• Solid AWS security experience, including IAM, network controls, secrets, and misconfigurations.
• Ability to work autonomously, collaborate closely with engineers, and contribute across security areas in a small team.

Nice to have

• GCP security experience.
• Detection and response experience or a strong interest in developing in this area.
• Web3 experience, including wallet, smart contract, or dApp security.
• Experience running a bug bounty program or findings pipeline end to end.
• Side projects and open-source work.

Culture & Benefits

• Hybrid work model with access to remote work and global office hubs through a WeWork All-Access pass.
• Globally competitive base salaries, long-term fund contributions, and employee stock options.
• USD $500 work-from-home allowance and USD $600 per year for internet and phone usage.
• USD $1,350 per year for classes, courses, AI tooling, or events, plus access to Udemy.
• USD $800 per year for health and wellbeing, 24/7 counselling, ClassPass subsidies, and Breethe membership.
• Paid parental leave, additional annual leave, and a paid birthday day off.

Hiring process

• A human reviews every application.
• Artificial intelligence tools may support application and response assessment, while final hiring decisions remain human-led.