Nullify is building the post-human product security program - one harness that drives product security work to closure by continuously allocating AI capacity toward the highest-impact product security work.

From detection through to triage, patch generation, assignment and escalation, the harness shares one pipeline shape and one bar for correctness. You'll own real slices of that system, from taint-analysis code graphs to the distributed logic that decides whether a PR is safe to merge.

What you'll do

- Build and extend detection and remediation pipelines across our security services, in Go and Python.
- Work on genuinely hard distributed-systems problems: deterministic PR check runs, idempotent scan orchestration, fair queuing across thousands of customer repos.
- Ship code that's held to a real bar - typed, tested,



reviewed, and deployed by commit sha with no shortcuts.
- Work close to the product: what you build shows up as a fix in a real engineer's PR within days, not quarters.

What you bring

- Strong fundamentals in Go and/or Python, and the judgment to know when to reach for which.
- Experience with production distributed systems - queues, state machines, idempotency, failure modes.
- A preference for straightforward, correct code over clever abstractions.
- Curiosity about security, even if it's not your background yet.

Compensation

- AUD120,000-200,000 + equity + benefits

📌 Software Engineer (Sydney)
🏢 Nullify
📍 Sydney