{"id":2503008,"url":"https://alion.io/job/ultahost-product-infrastructure-security-engineer","title":"Product & Infrastructure Security Engineer","company":{"id":1792005,"name":"Ultahost","domain":"ultahost.com","url":"https://alion.io/company/ultahost","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"B","score":75,"open_postings":59,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chișinău, Moldova"],"countries":["MD"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":60000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"KVM","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Proxmox VE","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"Threat Modeling","optional":false},{"name":"VMWare","optional":false},{"name":"Wireshark","optional":false},{"name":"WordPress","optional":false},{"name":"PHP","optional":true}],"status":"live","first_seen_at":"2026-08-19T08:05:35Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-15T17:29:52Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":57},"description":"Job Overview\nUltaHost is looking for a Senior Product & Infrastructure Security Engineer to take ownership of the security of our hosting products and the infrastructure that delivers them. This is a deeply technical, hands-on position combining product security, application security, Linux/server security, virtualization, network security, vulnerability management, and DDoS incident response. We are looking for someone who understands security not only from a testing perspective, but from the realities of operating and protecting production hosting infrastructure.\nWhat You’ll Own\nHosting Product & Application Security\nReview the security of VPS, VDS, dedicated servers, shared hosting, WordPress, cloud, Mac hosting, email hosting, game hosting, customer portals, control panels, APIs, and internal hosting platforms.\nAssess authentication, authorization, session security, tenant isolation, secrets handling, privileged operations, and data-exposure risks.\nPerform threat modeling, architecture reviews, security testing, API security reviews, and release risk assessments.\nDefine security requirements and release checks for new products, major features, and sensitive platform changes.\nWork with Product, Engineering, DevOps, and QA teams until vulnerabilities are remediated, retested, and closed.\nServer, Virtualization & Network Security\nDefine secure baselines for Linux servers, hypervisors, control panels, network devices, firewalls, storage systems, and management interfaces.\nReview SSH configurations, exposed ports and services, routing, DNS, firewall rules, segmentation, management access, and privilege boundaries.\nSecure environments involving Proxmox, KVM, VMware, Ceph, containers, VPS nodes, dedicated infrastructure, and data-center connectivity.\nInvestigate brute-force attacks, malware, suspicious processes, privilege escalation, lateral movement, data exfiltration, and abnormal traffic.\nOwn technical DDoS/DoS response, including traffic analysis, mitigation, provider escalation, evidence collection, and post-incident reviews.\nVulnerability & Technical Incident Management\nRun vulnerability scanning, configuration audits, patch-risk assessments, and targeted penetration testing.\nPrioritize vulnerabilities according to actual customer and infrastructure risk.\nAssign remediation owners and deadlines and verify that fixes are effective.\nLead product and infrastructure security incidents.\nSupport internal security incidents when servers, networks, or applications are involved.\nWhat We’re Looking For\n5+ years of hands-on experience in hosting security, infrastructure security, Linux security, network security, product security, cloud security, or a closely related role.\nAdvanced Linux administration skills.\nReal-world experience with VPS, dedicated servers, shared hosting, control panels, hypervisors, storage, or large multi-tenant environments.\nExperience with Proxmox, KVM, VMware, Ceph, containers, or equivalent virtualization and cluster technologies.\nStrong knowledge of TCP/IP, DNS, routing, firewalls, VPNs, segmentation, and traffic analysis.\nHands-on experience detecting and mitigating DDoS attacks.\nStrong understanding of OWASP Top 10, API security, authentication, authorization, session security, tenant isolation, secrets management, and secure release practices.\nExperience with vulnerability scanners, penetration-testing tools, SAST/DAST, dependency scanning, configuration reviews, tcpdump, Wireshark, and log analysis.\nAbility to investigate compromised servers, malware, brute-force attacks, web attacks, privilege escalation, and abnormal network behavior.\nPreferred Background\nDirect experience in a web hosting company, cloud provider, ISP, CDN, data center, infrastructure vendor, or MSSP is highly preferred. Preferred certifications include OSCP, OSWA, CCNP Security, GIAC, Security+, CISSP, cloud-security certifications, or equivalent practical expertise. Certifications are valuable, but real production experience is more important.\nWhat Success Looks Like\nYou will help us achieve:\nEarlier detection of critical vulnerabilities before release or exploitation\nFaster containment of product, server, network, and DDoS incidents\nReduction of exposed high-risk services and unsafe configurations\nReduction of overdue vulnerabilities\nSecure baseline coverage across Linux, virtualization, network, and hosting products\nStronger product-security reviews and remediation verification\nPrevention of recurring security weaknesses\nImportant\nThis is not a general penetration-testing position. We need someone who can secure and investigate real production hosting infrastructure not someone whose experience is limited to vulnerability testing and producing penetration-test reports. You will work closely with our Internal Security & Security Operations Engineer and collaborate with Product, Engineering, DevOps, Network, QA, Support, Abuse, and executive management. If Linux, networks, virtualization, hosting infrastructure, product security, and incident response are where you do your best work, we’d like to hear from you.","description_format":"text","description_chars":5101,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Web Hosting & VPS"],"lifecycle":[{"event":"open","at":"2026-10-14T06:44:15Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.417,"p_room":0.28,"age_days":56,"expected_fill_days":28,"reasons":["conf:4","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ultahost-product-infrastructure-security-engineer","json_url":"https://alion.io/job/ultahost-product-infrastructure-security-engineer.json","meta":{"generated_at":"2026-10-15T19:21:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29235,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1792005},"rest":"https://alion.io/mcp/rest/get_company?id=1792005"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fultahost-product-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fultahost-product-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fultahost-product-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ultahost-product-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fultahost-product-infrastructure-security-engineer"}]}