{"id":393421,"url":"https://alion.io/job/alex-staff-agency-security-engineer-staff-engineer","title":"Security Engineer / Staff Engineer","company":{"id":6834,"name":"Alex Staff Agency","domain":"alexstaff.agency","url":"https://alion.io/company/alex-staff-agency","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["AE","AR","BR","PL","RS","ES"],"hiring_countries_total":6,"salary":{"min":null,"max":12000,"currency":"USD","period":"month","gross":true,"usd_annual":144000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Node JS","optional":false},{"name":"Copilot","optional":true},{"name":"Cursor","optional":true},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-03T00:00:00Z","employer_posted_date":"2026-09-03","last_verified_at":"2026-10-31T07:09:07Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":58},"description":"Imunify360 is a leading developer of Linux infrastructure and security solutions. Our flagship product, Imunify360, is a comprehensive security suite that protects thousands of shared hosting environments, VPS, and dedicated servers worldwide. Our clients include industry giants such as Dell, GoDaddy, IBM, and Zoom, with over 4,500 customers globally. The company has more than 250 employees.\nWe are looking for an engineer-architect to build a new product from scratch. This is not a position within an existing team-you will single-handedly create a runtime protection layer for Node.js applications. The hosting market is rapidly adopting Node.js, and modern applications are increasingly generated by users with AI tools and little technical security expertise. Your mission is to make protection automatic, transparent to client code, and effective in real time.\nThis is a role with the highest level of ownership (Senior / Staff / Architect level), where you will make key architectural decisions and take full responsibility for the outcome.\nResponsibilities\nDefine the technical approach for building runtime protection inside the Node.js process.\nDesign the detection logic to identify and block attacks during application execution.\nBuild and launch the first version of the product in real production environments.\nEnsure the protection works without requiring changes to client code and without breaking legitimate applications.\nContinuously improve the product based on telemetry, production feedback, and real-world incidents.\nAchieve target values across four key metrics: \nRuntime overhead\nFalse positives\nFalse negatives\nCustomer escalation volume\nRequirements\nThe top priority is Security, not just Node.js. Security experience outweighs general backend tenure.\nMust-have:\n Experience in Security Engineering or Security Research (deep understanding of attack vectors and defense methods).\n Have independently built and shipped a product/solution from scratch (end-to-end ownership: from idea to production).\nAbility to take an ambiguous problem, define a solution, and deliver a working result without constant supervision.\nExperience designing architecture and making key technical decisions (Staff/Architect level is a strong plus).\nEnglish language: Intermediate or higher (written and spoken - all interviews are conducted in English).\nNice-to-have:\nSecurity experience specifically in the context of Node.js (vulnerability analysis, securing, researching Node.js applications).\nExperience with Linux in production and development environments.\nKnowledge of Runtime Protection, WAF, instrumentation, malware analysis, and Incident Response.\nExperience in managed hosting / VPS domains.\nExperience with AI coding agents (Copilot, Cursor, etc.).\nImportant: If you are a Security Engineer / Researcher who doesn't code on a daily basis, you must be comfortable using AI-assisted development tools and be capable of building an MVP with their help.\nWho you are (mindset):\nBuilder: You genuinely enjoy creating something new and seeing it run in production.\nHigh ownership: You don't wait for tasks to be assigned - you define the approach and own the results.\n Practioner: You write code (yourself or with AI), not just review and coordinate.\nYou understand Detection Engineering - how detection rules behave at scale across thousands of servers and the true cost of false positives.\nWe do NOT consider candidates who:\nHave only theoretical or research experience without shipping real products.\nHave general Node.js development experience but lack a security component.\nReside in countries with complex B2B tax reporting requirements (USA, UK, Canada, Germany, France, and others - to be clarified during screening).\nHave frequent job changes (every 1-2 years) without valid reasons.\nBenefits\nFormat: 100% remote work anywhere in the world.\n Legal setup: B2B only (contract with your sole proprietorship or company).\n Budget: Up to $12,000 gross/month (before taxes, under a B2B agreement).\nCompany: A stable, established international product company with 15+ years in the market.\n Role: A key position in building a new product line from the ground up.","description_format":"text","description_chars":4176,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Intermediate (B1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United Arab Emirates","iso":"AE","kind":"country"},{"name":"Argentina","iso":"AR","kind":"country"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Serbia","iso":"RS","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-05T23:35:38Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.464,"p_room":0.55,"age_days":58,"expected_fill_days":47,"reasons":["conf:2","agency","urgency","win:tail"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":144000,"is_top_pay":false},"html_url":"https://alion.io/job/alex-staff-agency-security-engineer-staff-engineer","json_url":"https://alion.io/job/alex-staff-agency-security-engineer-staff-engineer.json","meta":{"generated_at":"2026-10-31T08:26:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12600,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6834},"rest":"https://alion.io/mcp/rest/get_company?id=6834"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falex-staff-agency-security-engineer-staff-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falex-staff-agency-security-engineer-staff-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falex-staff-agency-security-engineer-staff-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alex-staff-agency-security-engineer-staff-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falex-staff-agency-security-engineer-staff-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":393421}},{"tool":"search_jobs","arguments":{"company":"alexstaff.agency","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":393421},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}