CloudLinux

Lead Security Engineer - Vulnerability Response (Imunify360)

Brak informacji o wynagrodzeniu

SeniorZdalnie·WarszawaFull-time

#465406·Dodano 12 dni temu·10

Źródło: Cloudlinux

Aplikuj teraz

Tech Stack / Keywords

WAFModSecurityCorazaSecLangPython PHPOWASP CRSCI/CD WordPress Linux

Podsumowanie oferty

You will own and build an AI-driven vulnerability response pipeline for Imunify360, taking vulnerabilities from disclosure through rule release and public advisory. The work includes extending the existing pipeline to ModSecurity/Coraza WAF rules and measuring protection speed, coverage, and false positives.

Wymagania

5+ years in web/application security, such as vulnerability research, detection engineering, or WAF engineering.
Deep understanding of web attack classes, including SQLi, XSS, RCE, auth bypass, path traversal, file upload, and deserialization, and how to detect them in HTTP traffic.
Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions.
Ability to read PHP code and understand a vulnerability from an advisory or patch diff.
Strong Python skills and experience building automation pipelines that run in production; CI/CD and automated testing experience.
Hands-on daily use of AI/LLM tools and ability to assess and verify their output.
Proven track record of leading a technical project end to end.
Product mindset and ability to reason about customer impact as well as technical correctness.
Upper-intermediate English or better.

Nice to have:

WordPress ecosystem security experience, including plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits, or bug bounty.
Experience with Coraza or other WAF engines.
Exploit analysis or threat intelligence background.
Linux server administration or hosting industry experience.
Strong ownership and ability to take responsibility for a goal.
Ability to see the whole process and identify bottlenecks.
Clear communication and raising risks early.
Calm under pressure, including when critical vulnerabilities arise outside working hours.
Comfort making decisions with incomplete information.

Obowiązki

Design and build the AI-driven pipeline from vulnerability disclosure to public announcement, including intake, triage, rule drafting, testing, and release.
Lead the extension of the existing WordPress-plugin pipeline to ModSecurity/Coraza rules.
Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities.
Build test harnesses to check rules against exploits and real traffic before release.
Lead and mentor security analysts, set priorities, review their work, and remove blockers.
Define and track time-to-protection, coverage, and false-positive rate, and improve them.
Automate advisory generation as part of the pipeline and agree on the format and review flow with marketing.

Benefity

Focus on professional development.
Interesting and challenging projects.
Flexible working hours.
24 days of vacation per year, 10 days of national holidays, and unlimited sick leave.
Compensation for private medical insurance.
Co-working and gym/sports reimbursement.
Budget for education.
Opportunity to receive a reward for the most innovative idea the company can patent.

Elastyczne godziny

Płatne święta

Opieka zdrowotna

Karta sportowa

Dofinansowanie szkoleń

Inne informacje

The role can be performed remotely from any location worldwide.

CloudLinux

6 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz