Job Description

Every detection service we ship - SAST, DAST, SCA, secrets, cloud posture - shares one pipeline shape and one bar for correctness. You'll own real slices of that system, from taint-analysis code graphs to the distributed logic that decides whether a PR is safe to merge.

What you'll do n

n
- n

Build and extend detection and remediation pipelines across our security services, in Go and Python.

n
- n

Work on genuinely hard distributed-systems problems: deterministic PR check runs, idempotent scan orchestration, fair queuing across thousands of customer repos.

n
- n

Ship code that's held to a real bar - typed, tested, reviewed, and deployed by commit sha with no shortcuts.

n
- n

Work close to the product: what you build shows up as a fix in a real engineer's PR within days, not quarters.

n

What you bring nn
- n

Robust fundamentals in Go and/or Python, and the judgment to know when to reach for which.

n
- n

Experience with production distributed systems - queues, state machines, idempotency, failure modes.

n
- n

A preference for simple, correct code over clever abstractions.

n
- n

Curiosity about security, even if it's not your background yet.

n

📌 Software Engineer - Nullify (New South Wales)
🏢 Black Nova Portfolio
📍 New South Wales