{"id":3150793,"url":"https://alion.io/job/cloudlinux-lead-security-engineer-vulnerability-response-imunify360","title":"Lead Security Engineer - Vulnerability Response (Imunify360)","company":{"id":3432,"name":"CloudLinux","domain":"cloudlinux.com","url":"https://alion.io/company/cloudlinux","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Warsaw, Poland","Prague, Czech Republic","Sofia, Bulgaria","Bucharest, Romania","Madrid, Spain","Tbilisi, Georgia"],"countries":["PL","CZ","BG","RO","ES","GE"],"hiring_countries":["BG","CZ","PL","RO","ES","GE"],"hiring_countries_total":6,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":105000,"period":"year","method":"role_seniority_country_cell","sample_n":10},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"ModSecurity","optional":false},{"name":"OWASP","optional":false},{"name":"PHP","optional":false},{"name":"Python","optional":false},{"name":"WordPress","optional":false},{"name":"CVE","optional":true},{"name":"WPScan","optional":true}],"status":"live","first_seen_at":"2026-10-23T12:15:05Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-26T08:29:41Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.\nCheck out our website for more information: cloudlinux.com\nImunify360 Security Suite is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention.\nWe are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team.\nThe challenge ahead\nWhen a critical vulnerability in a popular web application or WordPress plugin goes public, attackers start exploiting it within hours. Most site owners can't patch that fast. We want our customers protected before the first attack reaches them, and we want them to know it.\nThat's the challenge we're hiring for:\nAI-driven vulnerability response. Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window.\nProtection plus public announcement, both automated. The same pipeline that ships the rule also produces the public advisory. Every critical vulnerability we cover is announced soon after the rule ships, so customers and the market see that Imunify closed it first.\nBuild on what works. An AI-assisted pipeline already runs for our WordPress protection plugin. The first big project is to extend this approach to ModSecurity/Coraza WAF rules.\nSpeed without breaking sites. On shared hosting, a rule that blocks legitimate traffic is a customer incident. Fast and precise both matter.\nMake it measurable. Time-to-protection, coverage of critical vulnerabilities, and false-positive rate are the numbers this role owns.\nAbout the role\nYou will own the vulnerability response pipeline end to end and be its main builder. You combine deep web application security expertise with strong automation skills, and you think about the product: what customers need, what to measure, what to build next. You'll lead a small team of security analysts and work closely with automation, QA, and marketing.\nWhat you'll do\nDesign and build the AI-driven pipeline from disclosure to announcement: vulnerability intake, triage, rule drafting, testing, release, and the public advisory.\nLead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules.\nWrite and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities.\nBuild test harnesses that check rules against exploits and real traffic before release.\nLead and mentor security analysts: set priorities, review their work, remove blockers.\nDefine and track time-to-protection, coverage, and false-positive rate, and improve them.\nAutomate advisory generation as part of the pipeline, and agree the format and review flow with marketing.\nRequirements\nWhat we're looking for:\n5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar.\nDeep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic.\nHands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions.\nAble to read PHP code and understand a vulnerability from an advisory or a patch diff.\nStrong Python: you've built automation pipelines that run in production. CI/CD and automated testing.\nHands-on daily use of AI/LLM tools; you know where to trust them and how to verify their output.\nProven track record of leading a technical project end to end.\nProduct mindset: you reason about customer impact, not only technical correctness.\nUpper-intermediate English or better.\nNice to have:\nWordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty.\nCoraza or other WAF engines.\nExploit analysis or threat intelligence background.\nLinux server administration, hosting industry.\nPersonal skills:\nStrong ownership: you take a goal, not a task list.\nSee the whole process and find the bottleneck, not only fix individual issues.\nCommunicate clearly and raise risks early.\nCalm under pressure: critical vulnerabilities don't wait for working hours.\nComfortable making decisions with incomplete information.\nBenefits\nWhat's in it for you?\nA focus on professional development.\nInteresting and challenging projects.\nFully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide.\nPaid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.\nCompensation for private medical insurance.\nCo-working and gym/sports reimbursement.\nBudget for education.\nThe opportunity to receive a reward for the most innovative idea that the company can patent.\nBy applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://cloudlinux.com/candidate-privacy-notice), which provides detailed information on how we maintain and handle your data.","description_format":"text","description_chars":5412,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule","Health insurance","Professional development"],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"},{"name":"Czech Republic","iso":"CZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Georgia","iso":"GE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Operating Systems","Vulnerability Management","Web Security & DDoS Protection"],"lifecycle":[{"event":"open","at":"2026-10-23T12:15:05Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":21,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/cloudlinux-lead-security-engineer-vulnerability-response-imunify360","json_url":"https://alion.io/job/cloudlinux-lead-security-engineer-vulnerability-response-imunify360.json","meta":{"generated_at":"2026-10-26T11:35:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15700,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3432},"rest":"https://alion.io/mcp/rest/get_company?id=3432"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudlinux-lead-security-engineer-vulnerability-response-imunify360"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudlinux-lead-security-engineer-vulnerability-response-imunify360"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudlinux-lead-security-engineer-vulnerability-response-imunify360"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudlinux-lead-security-engineer-vulnerability-response-imunify360\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudlinux-lead-security-engineer-vulnerability-response-imunify360"}]}