Lead Security Engineer – Vulnerability Response, Imunify360

🔥 0 minutes ago

🌐 Poland, Czechia, +4 more countries – Remote

🇵🇱 Poland – Remote 🇨🇿 Czechia – Remote 🇧🇬 Bulgaria – Remote 🇷🇴 Romania – Remote 🇪🇸 Spain – Remote 🇬🇪 Georgia – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CloudLinux

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2009

☁️ SaaS

🔐 Security

🌐 Web 3

SaaS • Security • Web 3

CloudLinux is a leading provider of operating systems designed specifically for web hosting environments. The company offers a line of products including CloudLinux OS Legacy, CloudLinux OS Shared Pro, and CloudLinux OS Solo, each tailored to improve server stability, security, and performance. With features such as kernel live patching, advanced automation and monitoring tools, and specialized WordPress optimization, CloudLinux helps hosting companies maximize security and profitability while ensuring stable server environments. Over 4,000 companies trust CloudLinux to power millions of websites worldwide, benefitting from increased stability and reduced churn rates. The company emphasizes compatibility with major hosting control panels and CentOS, offering solutions for shared hosts, agencies, and small businesses.

📋 Description

• Design and build the AI-driven pipeline from vulnerability disclosure to public announcement, including intake, triage, rule drafting, testing, release, and advisory • Extend the existing WordPress-plugin pipeline to ModSecurity/Coraza rules • Write and review WAF rules using ModSecurity/SecLang for real-world web vulnerabilities • Build test harnesses to check rules against exploits and real traffic before release • Lead and mentor security analysts, set priorities, review work, and remove blockers • Define and track time-to-protection, vulnerability coverage, and false-positive rate • Automate advisory generation and agree the format and review flow with marketing • Own the vulnerability response pipeline end to end and serve as its main builder • Work closely with automation, QA, and marketing

🎯 Requirements

• 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar • Deep understanding of web attack classes including SQLi, XSS, RCE, authentication bypass, path traversal, file upload, and deserialization, and how to detect them in HTTP traffic • Hands-on experience writing WAF rules using ModSecurity/SecLang, OWASP CRS, or similar, and regular expressions • Ability to read PHP code and understand a vulnerability from an advisory or patch diff • Strong Python experience building automation pipelines that run in production • Experience with CI/CD and automated testing • Hands-on daily use of AI/LLM tools and ability to verify their output • Proven track record of leading a technical project end to end • Product mindset focused on customer impact • Upper-intermediate English or better • WordPress ecosystem security, vulnerability feeds, CVE credits, or bug bounty experience is nice to have • Coraza or other WAF engine experience is nice to have • Exploit analysis or threat intelligence background is nice to have • Linux server administration or hosting industry experience is nice to have

🏖️ Benefits

• A focus on professional development • Interesting and challenging projects • Fully remote work with flexible working hours, allowing work from any location worldwide • Paid 24 days of vacation per year • 10 days of national holidays • Unlimited sick leaves • Compensation for private medical insurance • Co-working reimbursement • Gym/sports reimbursement • Budget for education • Opportunity to receive a reward for the most innovative idea that the company can patent