Lead Security Engineer – Vulnerability Response, Imunify360

• Design and build the AI-driven pipeline from vulnerability disclosure to public announcement, including intake, triage, rule drafting, testing, release, and advisory
• Extend the existing WordPress-plugin pipeline to ModSecurity/Coraza rules
• Write and review WAF rules using ModSecurity/SecLang for real-world web vulnerabilities
• Build test harnesses to check rules against exploits and real traffic before release
• Lead and mentor security analysts, set priorities, review work, and remove blockers
• Define and track time-to-protection, vulnerability coverage, and false-positive rate
• Automate advisory generation and agree the format and review flow with marketing
• Own the vulnerability response pipeline end to end and serve as its main builder
• Work closely with automation, QA, and marketing

• 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar
• Deep understanding of web attack classes including SQLi, XSS, RCE, authentication bypass, path traversal, file upload, and deserialization, and how to detect them in HTTP traffic
• Hands-on experience writing WAF rules using ModSecurity/SecLang, OWASP CRS, or similar, and regular expressions
• Ability to read PHP code and understand a vulnerability from an advisory or patch diff
• Strong Python experience building automation pipelines that run in production
• Experience with CI/CD and automated testing
• Hands-on daily use of AI/LLM tools and ability to verify their output
• Proven track record of leading a technical project end to end
• Product mindset focused on customer impact
• Upper-intermediate English or better
• WordPress ecosystem security, vulnerability feeds, CVE credits, or bug bounty experience is nice to have
• Coraza or other WAF engine experience is nice to have
• Exploit analysis or threat intelligence background is nice to have
• Linux server administration or hosting industry experience is nice to have

• A focus on professional development
• Interesting and challenging projects
• Fully remote work with flexible working hours, allowing work from any location worldwide
• Paid 24 days of vacation per year
• 10 days of national holidays
• Unlimited sick leaves
• Compensation for private medical insurance
• Co-working reimbursement
• Gym/sports reimbursement
• Budget for education
• Opportunity to receive a reward for the most innovative idea that the company can patent