Remote opportunity at
CloudLinuxStaff Security Engineer, Imunify360 (remote work)
CloudLinux operates as a global remote-first enterprise that delivers high-volume, low-cost Linux infrastructure and security solutions designed to boost operational efficiency for companies worldwide. The organization…
Career Tools
About This Role
CloudLinux operates as a global remote-first enterprise that delivers high-volume, low-cost Linux infrastructure and security solutions designed to boost operational efficiency for companies worldwide. The organization is currently hiring a Staff Security Engineer for the Imunify360 product line, which functions as a security suite protecting hundreds of thousands of hosting servers and websites from large-scale attacks. This position is an individual contributor role with no direct reports, focusing heavily on…
Job Description
CloudLinux operates as a global remote-first enterprise that delivers high-volume, low-cost Linux infrastructure and security solutions designed to boost operational efficiency for companies worldwide. The organization is currently hiring a Staff Security Engineer for the Imunify360 product line, which functions as a security suite protecting hundreds of thousands of hosting servers and websites from large-scale attacks.
This position is an individual contributor role with no direct reports, focusing heavily on hands-on technical leadership rather than compliance, theoretical research, or standard security operations center monitoring. The successful candidate will take end-to-end technical ownership of complicated security challenges, spanning from initial threat discovery through mitigation and post-incident review. Responsibilities include analyzing malware and exploit codes, building detection tools, anticipating emerging attack vectors, coordinating incident responses, and conducting internal red-team assessments. The ideal applicant possesses extensive experience in security engineering, incident response, or malware research, alongside strong Linux competence and programming skills in Python and a systems language.
Responsibilities
- Lead triage, root cause analysis, and mitigation for large-scale exploitation and malware campaigns across all product protection layers
- Reverse-engineer malware and exploits targeting Linux environments and web applications
- Cluster indicators, connect activity to recognized actors and toolkits, and forecast upcoming variants
- Establish and manage measurable outcomes for campaigns including time to detect and reinfection rates
- Oversee the security incident and response process for customer threats and product vulnerabilities
- Coordinate vulnerability disclosures and response efforts with external software vendors, partners, CERTs, and abuse desks
- Conduct red-team evaluations of product infrastructure assuming an attacker with an existing foothold
- Perform threat modeling on new features and manage security review gates for high-risk updates
- Construct and automate analysis pipelines utilizing dynamic analysis, honeypots, and telemetry-driven hunting
- Mentor analysts and engineers while acting as a bar-raiser in the hiring process
Requirements
- Ten or more years of experience in security engineering, malware research, incident response, or offensive security
- Several years of experience leading cross-team work at a Staff, Principal, or Lead scope
- Deep hands-on malware analysis and reverse engineering capabilities
- Strong web application security and practical exploitation expertise
- Comprehensive Linux knowledge from both defensive and offensive perspectives
- Demonstrated incident response leadership for large-scale events, including running responses and writing post-mortems
- Production coding proficiency in Python and a systems language such as Go, Rust, or C
- Experience engaging in coordinated vulnerability disclosure and collaborating with the broader security community
- Clear, concise written communication skills suitable for technical and non-technical stakeholders across time zones
- Regular utilization of AI tools for analysis and coding with critical evaluation of outputs
Qualifications
- Background working in hosting or large web ecosystems
- Experience authoring detections at scale using signatures, WAF, or IDS rules
- Familiarity with kernel-level monitoring and rootkit detection
- Experience with threat intelligence practices and actor tracking
- Knowledge of machine learning applications for malware classification
- A public track record featuring CVEs, published research, talks, CTFs, or open-source security tools
- Relevant certifications are accepted as an optional plus
Core Skills
Benefits
- Fully remote work environment with flexible working hours
- 24 paid vacation days
- 10 national holidays
- Unlimited sick leave
- Private medical insurance compensation
- Co-working and gym or sports reimbursement
- Education budget
- Opportunity to receive rewards for patentable innovative ideas
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, CloudLinux is a global remote-first company and this role offers fully remote work with flexible working hours.
Does this role include people management responsibilities?
No, this is an individual contributor position with no direct reports, though it does involve mentoring analysts and engineers.
What level of experience is required for this position?
Candidates must have 10+ years of experience in security engineering, malware research, incident response, or offensive security, including several years leading cross-team work at a Staff, Principal, or Lead scope.
What is the salary for the Staff Security Engineer role?
The salary is not stated in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.