Remote opportunity at
CloudLinuxLead Security Engineer - Vulnerability Response (Imunify360)
CloudLinux operates as a global remote-first organization delivering high-volume, low-cost Linux infrastructure and security products, including the Imunify360 security suite designed for shared, VPS, and dedicated…
Career Tools
About This Role
CloudLinux operates as a global remote-first organization delivering high-volume, low-cost Linux infrastructure and security products, including the Imunify360 security suite designed for shared, VPS, and dedicated servers. The company is currently seeking a Lead Security Engineer - Vulnerability Response to join its Web Protection Team. In this remote position, the engineer will own and build an end-to-end AI-driven vulnerability response pipeline. The role involves detecting critical web application and WordPress…
Job Description
CloudLinux operates as a global remote-first organization delivering high-volume, low-cost Linux infrastructure and security products, including the Imunify360 security suite designed for shared, VPS, and dedicated servers. The company is currently seeking a Lead Security Engineer - Vulnerability Response to join its Web Protection Team. In this remote position, the engineer will own and build an end-to-end AI-driven vulnerability response pipeline. The role involves detecting critical web application and WordPress plugin vulnerabilities, generating and validating WAF rules, and shipping protections and public advisories rapidly to production.
This role suits professionals with a strong background in application security, automation, and technical project leadership who can balance speed with precision on shared hosting environments. The lead will manage a small team of security analysts, establish and track key metrics such as time-to-protection and false-positive rates, and collaborate with automation, quality assurance, and marketing groups.
Responsibilities
- Design and build the AI-driven pipeline from vulnerability intake and triage to rule drafting, testing, release, and public advisory
- Lead the extension of the existing WordPress-plugin pipeline to ModSecurity and Coraza rules
- Write and review ModSecurity and SecLang WAF rules for real-world web vulnerabilities
- Construct test harnesses to check rules against exploits and real traffic prior to release
- Lead and mentor security analysts by setting priorities, reviewing work, and removing blockers
- Define, track, and improve time-to-protection, coverage, and false-positive rates
- Automate advisory generation within the pipeline and coordinate formats and review workflows with marketing
Requirements
- At least five years of experience in web or application security, vulnerability research, detection engineering, or WAF engineering
- Deep understanding of web attack classes including SQL injection, cross-site scripting, remote code execution, authentication bypass, path traversal, file upload, and deserialization
- Hands-on experience writing WAF rules using ModSecurity, SecLang, OWASP CRS, or similar frameworks, alongside regular expressions
- Ability to read PHP code and comprehend vulnerabilities from advisories or patch diffs
- Strong Python skills with experience building automation pipelines that run in production
- Experience with CI and CD pipelines and automated testing
- Hands-on daily use of AI and LLM tools with the ability to trust and verify their outputs
- Proven track record of leading a technical project from end to end
- Product mindset focused on customer impact and technical correctness
- Upper-intermediate English proficiency or better
Qualifications
- Familiarity with WordPress ecosystem security, plugin vulnerabilities, vulnerability feeds such as Wordfence, Patchstack, and WPScan, CVE credits, or bug bounties
- Experience with Coraza or other WAF engines
- Background in exploit analysis or threat intelligence
- Experience in Linux server administration and the hosting industry
Core Skills
Benefits
- Fully remote work setup with flexible working hours from any location worldwide
- Paid twenty-four days of vacation per year
- Ten days of national holidays
- Unlimited sick leaves
- Compensation for private medical insurance
- Co-working and gym or sports reimbursement
- Budget allocated for education
- Opportunity to receive rewards for innovative ideas eligible for company patenting
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, CloudLinux is a global remote-first company offering fully remote work from any location worldwide with flexible working hours.
What is the employment type?
The posting specifies full-time employment.
What is the salary for this role?
The salary is not stated in the job posting.
What experience is required to apply?
Candidates must have five or more years of experience in web or application security, vulnerability research, detection engineering, or WAF engineering, along with strong Python skills and experience building production automation pipelines.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
Search similar jobs
Related Jobs