{"id":2848564,"url":"https://alion.io/job/cloudlinux-staff-security-engineer-imunify360-remote-work","title":"Staff Security Engineer, Imunify360 (remote work)","company":{"id":3432,"name":"CloudLinux","domain":"cloudlinux.com","url":"https://alion.io/company/cloudlinux","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Lisbon, Portugal","Warsaw, Poland","Madrid, Spain","Prague, Czech Republic"],"countries":["PT","PL","ES","CZ"],"hiring_countries":["CZ","PL","ES","PT"],"hiring_countries_total":4,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":124000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false}],"status":"live","first_seen_at":"2026-10-19T12:17:07Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-21T18:27:43Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.\nCheck out our website for more information: cloudlinux.com\nWe are currently hiring a Staff Security Engineer within the Imunify360 product.\nImunify360 is CloudLinux's security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early - often in the first hours.\nCheck out our website for more information: https://imunify360.com/\nRole Mission & Scope\nAt Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats - it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected.\nAs a Staff Security Engineer, you'll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review.\nThis is a hands-on technical leadership role focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. You'll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes.\nYou'll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities.\nAs an individual contributor, you won't have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices.\nYour mission is to strengthen Imunify360's ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale.\nWhat you will own\nMalware and campaign mitigation\nLead response to large-scale exploitation and malware campaigns: triage, root cause, and mitigation across every protection layer of the product.\nReverse-engineer malware and exploits targeting Linux servers and web applications.\nTrack campaigns over time, not just individual samples: cluster indicators, connect activity to known actors and toolkits, anticipate the next variant.\nDefine and run measurable outcomes per campaign: time to detect, time to protect, cleanup effectiveness, reinfection rate.\nSecurity response coordination\nOwn the security incident and response process, both for threats against our customers and for vulnerabilities in our own product: severity model, runbooks, communication, escalation.\nCoordinate with external parties - software vendors, partners, CERTs/CSIRTs, abuse desks, other security vendors. Drive responsible disclosure where we find vulnerabilities.\nBe the technical voice in security advisories and partner briefings, together with Product and Support.\nTriage external vulnerability reports.\nOffensive security on our own product\nRed-team our product and infrastructure. Assume a capable attacker who already has a foothold.\nThreat-model new features before they ship; own the security review gate for high-risk changes.\nTurn findings into fixes with the owning teams, not just reports.\nDetection engineering and tooling\nRaise the quality bar of detections: false-positive budgets, test corpora, staged rollout with measurement gates and fast rollback.\nBuild and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage where it measurably helps.\nWrite production code for these tools; expect 30-50% of your time to be hands-on building.\nTurn telemetry into intelligence: emerging exploits, attacker infrastructure, trends - shared as internal briefs and selected public research.\nPeople multiplier (no direct reports)\nMentor analysts and engineers; raise the security skill level across teams.\nBar-raiser in security hiring loops.\nKey Milestones\n30 days: Analyzed real threats end-to-end. Mapped the current response flow and where it breaks. Shipped at least one detection or mitigation to production.\n90 days: Security response process and severity model published and agreed. Led at least one real campaign response with a written post-mortem. Baseline response metrics in place.\n6 months: Time from first sighting to protection measurably reduced vs. baseline. First red-team review completed, top findings fixed. Working relationships with key external partners.\n12 months: Recognized internally and externally as the owner of security response. Public research or disclosures published. Teams can run a standard campaign response without you.\nRequirements\nMust have\n10+ years in security engineering, malware research, incident response, or offensive security, with several years leading cross-team work at Staff/Principal/Lead scope.\nDeep hands-on malware analysis and reverse engineering skills.\nStrong web application security and practical exploitation experience.\nDeep Linux knowledge from both the attacker's and the defender's side.\nProven incident response leadership on large-scale events: you have run the response, written the advisory, and closed the post-mortem.\nProduction coding in Python plus a systems language (Go, Rust or C).\nExperience with coordinated vulnerability disclosure and working with the security community.\nClear, short writing for both engineers and non-technical stakeholders; works well async across time zones.\nDaily user of AI tools for analysis and coding, with critical judgment about their output.\nNice to have\nBackground in hosting or large web ecosystems.\nDetection authoring at scale (signatures, WAF/IDS rules).\nKernel-level monitoring and rootkit detection.\nThreat intelligence practice and actor tracking.\nML for malware classification.\nPublic track record: CVEs, published research, talks, CTFs, open-source security tools.\nRelevant certifications are a plus, not a requirement.\nBenefits\nWhat's in it for you?\nStay hands-on technically while owning complex, high-impact engineering work.\nWork on challenging Linux, automation, and cybersecurity problems across mature and newer products.\nInfluence technical direction and make meaningful architectural decisions.\nWork independently with a high level of ownership and autonomy.\nFully remote work with flexible working hours.\n24 paid vacation days, 10 national holidays, and unlimited sick leave.\nPrivate medical insurance compensation.\nCo-working and gym/sports reimbursement.\nEducation budget.\nOpportunity to receive a reward for innovative ideas that the company can patent.\nBy applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.","description_format":"text","description_chars":7386,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Operating Systems","Vulnerability Management","Web Security & DDoS Protection"],"lifecycle":[{"event":"open","at":"2026-10-19T12:17:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":21,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/cloudlinux-staff-security-engineer-imunify360-remote-work","json_url":"https://alion.io/job/cloudlinux-staff-security-engineer-imunify360-remote-work.json","meta":{"generated_at":"2026-10-21T20:32:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29149,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3432},"rest":"https://alion.io/mcp/rest/get_company?id=3432"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudlinux-staff-security-engineer-imunify360-remote-work"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudlinux-staff-security-engineer-imunify360-remote-work"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudlinux-staff-security-engineer-imunify360-remote-work"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudlinux-staff-security-engineer-imunify360-remote-work\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudlinux-staff-security-engineer-imunify360-remote-work"}]}