The opportunity
Immutable is the world's fastest-growing game platform, built to power the next generation of games. Immutable's full-stack product suite powers every stage of game creation and growth from infrastructure to player engagement.
What you'll do
Own, our vulnerability management program, including the Bugcrowd and: Immunefi bug bounties and findings from our scanning tools, with a goal of 90%+ SLA compliance on critical and high issues
Own the AI agents that review pull requests for security issues and triage incoming bugs
A security context layer (threat models, asset inventory, past findings) that: lets those agents triage and propose fixes with less human input
Keeping our threat models and attack graphs current as the product changes
Application security depth. You can find a broken auth flow or an injection: bug in code, explain why it happened and fix it properly. You’re also a capable software engineer who ships production code, whether that’s a fix in someone else’s service or a tool you built from scratch.
You’ve built AI tooling yourself. It might be an agent, an automation or an: internal tool, and you can tell us what worked, what didn’t and how you knew. Plenty of people use AI tools well. For this role we need someone who builds them.
What they're looking for
- Solid AWS security experience will help a lot (IAM, network controls,: secrets, misconfigurations). GCP, detection and response experience, and web3 knowledge are all useful, though none are deal-breakers. Side projects and open source work tell us a lot, so please include them.
- You’ll enjoy this if you like autonomy, work well beside engineers and are: happy to help out in other parts of security when a small team needs it. It’s probably not a fit if you’d rather report findings than fix them.
- Web3 experience, such as wallet, smart contract or dApp security. You can: learn it here, but it’ll help from day one.
- Deeper detection and response experience, or a real interest in growing into it
