About Us

We're Wield, an early-stage, venture-backed team building something new in the monetization infrastructure space founded by ex-Canva alumni and based in Surry Hills. We can't tell you exactly what it is yet, but we can tell you what it feels like: a hard, real-world problem, a product people will rely on every day, and a small team where every engineer shapes the foundations. We've raised a significant seed round, we're backed by top-tier US and Australian investors, and we're hiring our first 10 engineers in Sydney.

Apply and we'll share more ?

The Role

You'll be our first dedicated security engineer, joining early enough to build security in rather than bolt it on. Our customers will trust us with sensitive data and with code that runs inside their own products, in front of millions of their users. That trust is the product. You'll own how we earn and keep it: our architecture, our infrastructure, our development practices and the certifications our customers expect.

The Challenges You'll Take On:

- Security as a foundation, not a phase. We're still early, so the decisions you make now become how we work for years. Threat modelling, secure defaults and guardrails that make the safe path the easy path.

- Code that lives inside other companies' products. Our SDKs and components run in our customers' apps. Supply chain integrity, isolation and a tiny attack surface all matter when a mistake could reach millions of end users.

- Multi-tenant from day one. Every customer's data must stay strictly separate, auditable and protected, even as we scale quick and add new capabilities.

- A public API built to be hammered. Authentication,



authorisation, rate limiting and abuse prevention for an API that developers around the world will integrate with.

- Securing AI in production. Our product uses AI to propose real changes for customers. You'll help make sure it can't be manipulated, leaks nothing it shouldn't, and always keeps a human in control.

- Trust customers can verify. You'll lead us through PCI-DSS, SOC 2 and the other certifications enterprise customers ask for, without turning the company into a box-ticking exercise.

Ideal Skills

- 8+ years in security engineering, ideally across application, cloud and infrastructure security.

- Deep experience securing cloud environments (AWS), including IAM, network design, secrets management and logging.

- You can code, and you'd rather ship a fix or a guardrail than write a ticket. Experience in a backend language (ideally Java) is a plus.

- You've run threat models, security reviews and incident response for systems in production.

- You've taken a company through SOC 2, ISO 27001 or similar, and know how to make compliance useful rather than painful.

- You build security culture through partnership, not gatekeeping. Engineers want you in the room.

Bonus Points

- Experience at a startup as an early or first security hire.

- Securing SDKs, browser-side code or third-party integrations.

- Background with sensitive financial or customer data, or with AI and LLM security.

- Experience in payments/fintech and PCI-DSS compliance

What You Get

- Very competitive salary for a seed startup

- Meaningful equity

- Real ownership of the product

- Lunch stipend

📌 Founding Security Engineer (Australia)
🏢 Wield
📍 Australia