Lead Security Engineer - Vulnerability Response (Imunify360)

About the role

CloudLinux is a remote-first company building Linux infrastructure and security products. Its Imunify360 Security Suite protects shared and VPS/Dedicated servers, and it is hiring a Lead Security Engineer for its Web Protection Team. You will own the AI-driven vulnerability response pipeline end to end: detecting new high and critical vulnerabilities, generating WAF rules with AI assistance, validating them, shipping them to production quickly, and producing the public advisory automatically. You will lead a small team of security analysts and work closely with automation, QA and marketing.

Key responsibilities

• Design and build the pipeline from vulnerability disclosure to announcement: intake, triage, rule drafting, testing, release and public advisory.
• Extend the existing WordPress-plugin pipeline to ModSecurity/Coraza WAF rules.
• Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities.
• Build test harnesses that check rules against exploits and real traffic before release.
• Lead and mentor security analysts: set priorities, review their work and remove blockers.
• Define and track time-to-protection, coverage and false-positive rate, and improve them.
• Automate advisory generation and agree the format and review flow with marketing.

Required profile

• 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering or similar.
• Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic.
• Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS or similar) and regular expressions.
• Able to read PHP code and understand a vulnerability from an advisory or patch diff.
• Proven track record of leading a technical project end to end, with a product mindset.
• Upper-intermediate English or better.
• Nice to have: WordPress ecosystem security, Coraza or other WAF engines, exploit analysis or threat intelligence background, Linux server administration and hosting industry experience.

Required skills

• Strong Python, with automation pipelines running in production.
• CI/CD and automated testing.
• Hands-on daily use of AI/LLM tools, with verification of their output.

What we offer

• Fully remote work with flexible hours, from anywhere in the world.
• Paid 24 days of vacation per year, 10 days of national holidays and unlimited sick leave.
• Compensation for private medical insurance, co-working and gym/sports reimbursement, and a budget for education.
• An opportunity to receive a reward for the most innovative idea the company can patent.