Security Engineer / Staff Engineer

Imunify360 is a leading developer of Linux infrastructure and security solutions. The company has more than 250 employees and serves over 4,500 customers globally, including Dell, GoDaddy, IBM, and Zoom. Their flagship product, Imunify360, protects thousands of shared hosting environments, VPS, and dedicated servers worldwide.

• Experience in Security Engineering or Security Research with a deep understanding of attack vectors and defense methods.
• Have independently built and shipped a product or solution from scratch with end-to-end ownership.
• Ability to solve ambiguous problems and deliver results without constant supervision.
• Experience designing architecture and making key technical decisions; Staff/Architect level is a strong plus.
• English language proficiency at intermediate level or higher.

Nice to have:

• Security experience specifically related to Node.js applications.
• Experience with Linux in production and development environments.
• Knowledge of Runtime Protection, WAF, instrumentation, malware analysis, and Incident Response.
• Experience with managed hosting and VPS domains.
• Experience with AI coding agents (e.g., Copilot, Cursor).

• Define the technical approach for building runtime protection inside the Node.js process.
• Design detection logic to identify and block attacks during application execution.
• Build and launch the first version of the product in real production environments.
• Ensure protection works without requiring changes to client code and without breaking legitimate applications.
• Continuously improve the product based on telemetry, production feedback, and real-world incidents.
• Achieve target values across runtime overhead, false positives, false negatives, and customer escalation volume.

Candidates residing in countries with complex B2B tax reporting requirements (including USA, UK, Canada, Germany, France, and others) will be clarified during screening and may not be considered. Candidates with frequent job changes every 1–2 years without valid reasons are not considered. The role requires intermediate or higher English proficiency for interviews. Only those comfortable using AI-assisted development tools and coding to build an MVP are considered if not coding daily.