{"id":2848563,"url":"https://alion.io/job/cloudlinux-staff-engineer-imunify360-remote-work","title":"Staff Engineer, Imunify360 (remote work)","company":{"id":3432,"name":"CloudLinux","domain":"cloudlinux.com","url":"https://alion.io/company/cloudlinux","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Prague, Czech Republic","Lisbon, Portugal","Madrid, Spain","Warsaw, Poland"],"countries":["CZ","PT","ES","PL"],"hiring_countries":["CZ","PL","ES","PT"],"hiring_countries_total":4,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":127000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2286},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CentOS Stream","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Claude","optional":false},{"name":"Cursor","optional":false},{"name":"eBPF","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"Hetzner","optional":false},{"name":"Linux","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Sentry","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Ubuntu","optional":false},{"name":"CI/CD","optional":true},{"name":"ClickHouse","optional":true},{"name":"GitLab CI","optional":true},{"name":"JavaScript","optional":true},{"name":"Jenkins","optional":true},{"name":"ModSecurity","optional":true},{"name":"Node JS","optional":true},{"name":"PHP","optional":true},{"name":"WordPress","optional":true}],"status":"live","first_seen_at":"2026-10-19T12:17:07Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-23T18:45:19Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.\nCheck out our website for more information: cloudlinux.com\nWe are currently hiring Staff Engineers for various projects within the Imunify360 product.\nImunify360 is CloudLinux's multi-layer security suite for Linux web servers: antivirus and malware cleanup, WAF, IDS/IPS, Proactive Defense, patch management (KernelCare/Patchman), and IP/domain reputation. It runs on hundreds of thousands of shared, VPS and dedicated hosting servers, under cPanel, Plesk, DirectAdmin and standalone.\nThe engineering org is 60+ engineers in squads covering backend, core, server agent, malware research, WAF/WebShield, and Patchman. Core services are Python; agents and performance-critical paths are Go and Rust. We run on Hetzner and our own bare metal.\nCheck out our website for more information: https://imunify360.com/\nRole Mission & Scope\nMost complex technical challenges in Imunify360 go beyond individual squads. A single detection change can impact the scanner, agent, UI, reputation backend, and release process. While squad leads own delivery within their teams, the Staff Engineer ensures technical alignment across the product.\nAs a Staff Engineer, you'll be a hands-on technical leader working across the entire product, focusing on the most critical and high-impact challenges as priorities evolve. You'll drive technical decisions, improve architecture, establish engineering standards, and help teams build sustainable solutions.\nThis is an individual contributor role, without direct people management responsibilities. You'll remain actively involved in development, spending approximately 30-50% of your time writing production code, rather than focusing solely on architectural design.\nWhile deep expertise in a particular area is valued, this role requires the flexibility to work across different components, collaborate with multiple squads, and tackle challenges wherever your expertise can make the greatest impact.\nWhat you will own\nArchitecture and technical direction\nOwn the end-to-end architecture of Imunify360 as a product: agent ↔ server ↔ cloud backends, data flows, and the contracts between them.\nWrite and drive ADRs and RFCs for cross-squad changes. Run the Wed/Fri architecture sync together with the Technical Director.\nKeep a living tech-debt and risk register (security / compliance / uptime) with owners and dates, and get the top items funded on the roadmap.\nHard cross-cutting problems (examples of what lands on your desk)\nAgent resource footprint on dense shared hosts: CPU, memory and I/O budgets for scanning, file monitoring (inotify/fanotify) and WAF, measured on real kernels, not benchmarks from elsewhere.\nDetection pipeline quality: false positive / false negative rates, signature and ML model rollout with staged gates and rollback.\nUpgrade and release safety across a large, heterogeneous fleet (CentOS/AlmaLinux/CloudLinux/Ubuntu, multiple control panels, old kernels).\nBackend scale and cost of reputation, ThreatIntel and telemetry services.\nMigrating hot paths from Python to Go/Rust where the data shows it pays off, and saying no where it doesn't.\nEngineering standards\nSet the bar for design reviews, code review, testing strategy, observability (Prometheus/Grafana/Sentry) and secure SDLC (OWASP ASVS, CIS Benchmarks as relevant).\nLead or co-lead SEV1/SEV2 incidents when the cause is unclear or cross-squad; make sure the blameless post-mortem ships within 24 h and its actions get closed.\nDrive the AI-augmented SDLC in practice: show what good agentic coding looks like (prompt specificity, context provision, review quality, tool boundaries) on real changes, not slides.\nPeople multiplier (no direct reports)\nMentor senior engineers and squad leads toward staff-level scope.\nAct as the technical bar-raiser in hiring loops for senior and lead roles.\nBe the engineering voice in product and sales discussions: estimates, feasibility, and no dated customer commitment without a written squad-lead estimate.\nKey Milestones\n30 days: Shipped at least one non-trivial change to production. Can explain the full request path from agent to backend. Has a personal list of top 10 technical risks.\n90 days: Owns one cross-squad initiative with an approved ADR, a measured baseline, and a staged rollout plan. Published risk register reviewed in arch sync.\n6 months: That initiative is in production with before/after metrics. At least one engineering standard (e.g. release gating, agent perf budget, design review template) is adopted by 3+ squads.\n12 months: Recognized by squad leads as the default escalation point for cross-cutting technical decisions. At least one senior engineer grown into broader scope with your mentorship.\nRequirements\nMust have\n10+ years building and operating production software, with 3+ years in a Staff/Principal/Tech Lead scope spanning several teams.\nStrong production experience in Python and at least one of Go or Rust .\nDeep Linux internals : processes, filesystems, networking, kernel interfaces (inotify/fanotify, eBPF or similar), packaging (RPM/DEB), systemd.\nTrack record of designing and running distributed systems at scale: async backends, queues, databases, caching, failure modes.\nYou have owned systems that run on customer machines (agents, daemons, on-prem software) and know what upgrade safety, backward compatibility and resource budgets mean there.\nSecurity mindset: threat modeling, secure coding, handling of untrusted input (files, HTTP traffic, user content).\nWrites clear, short technical documents and drives decisions in async, remote teams across time zones.\nUses AI coding tools (Cursor, Claude, MCP-based tooling) daily and can judge their output critically.\nNice to have\nExperience in server security: AV/malware detection, WAF (ModSecurity/Coraza), IDS/IPS, rootkit detection, CVE/patch management.\nExperience with WordPress and Node.JS web application hosting at scale\nML in production for classification/detection, including evaluation and safe model rollout.\nObservability at scale: Prometheus, Grafana, Sentry, ClickHouse or similar.\nCI/CD ownership: GitLab CI, Jenkins, build systems for multi-distro packaging.\nOpen-source contributions in security or systems tooling.\nBenefits\nWhat's in it for you?\nStay hands-on technically while owning complex, high-impact engineering work.\nWork on challenging Linux, automation, and cybersecurity problems across mature and newer products.\nInfluence technical direction and make meaningful architectural decisions.\nWork independently with a high level of ownership and autonomy.\nFully remote work with flexible working hours.\n24 paid vacation days, 10 national holidays, and unlimited sick leave.\nPrivate medical insurance compensation.\nCo-working and gym/sports reimbursement.\nEducation budget.\nOpportunity to receive a reward for innovative ideas that the company can patent.\nBy applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.","description_format":"text","description_chars":7465,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Operating Systems","Vulnerability Management","Web Security & DDoS Protection"],"lifecycle":[{"event":"open","at":"2026-10-19T12:17:07Z"}],"visa":[],"liveness":{"score":87,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.866,"p_room":1,"age_days":3,"expected_fill_days":21,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cloudlinux-staff-engineer-imunify360-remote-work","json_url":"https://alion.io/job/cloudlinux-staff-engineer-imunify360-remote-work.json","meta":{"generated_at":"2026-10-23T21:45:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4049,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3432},"rest":"https://alion.io/mcp/rest/get_company?id=3432"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudlinux-staff-engineer-imunify360-remote-work"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudlinux-staff-engineer-imunify360-remote-work"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudlinux-staff-engineer-imunify360-remote-work"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudlinux-staff-engineer-imunify360-remote-work\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudlinux-staff-engineer-imunify360-remote-work"}]}