Lead Vulnerability Response Engineer - AI-Driven Web Security

Jobgether; United Arab Emirates; Remote; AED 420,000 - 700,000; Full time

Benefits offered by this job

Fully remote work

24/7 remote collaboration

Flexible working hours

Healthcare support

Continued education budget

Professional development

Remote-first culture

Innovation reward

Technical challenges

Leadership opportunities

Coworking reimbursement

Sick leave: unlimited

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response to head an AI-assisted vulnerability pipeline for protecting websites. You will extend WAF rules, supervise a small team, and collaborate across teams to ensure rapid, accurate protection.

Experience in ModSecurity/Coraza, PHP source analysis, and Python automation is required. This role offers remote work with international scope and a focus on customer protection and fast response.

Qualifications

• 5+ years of experience in web or application security.
• Experience with web attack classes: SQLi, XSS, RCE, path traversal, file upload, insecure deserialization.
• Proficiency writing WAF rules using ModSecurity/SecLang, CRS, or similar.
• Regex proficiency translating attack patterns into rules.
• Ability to read PHP source code and understand vulnerabilities from advisories/patches.
• Strong Python programming skills for automation pipelines.
• Experience with CI/CD, automated testing, and secure delivery processes.
• Hands-on use of AI/LLM tools with independent validation of outputs.
• Ability to lead a technical project end to end from objective to deployment.
• Product-oriented mindset considering customer impact and risk.
• Strong ownership, problem-solving, and identifying bottlenecks.
• Clear communication and collaboration across teams under pressure.
• English proficiency at upper-intermediate level or higher.
• Nice-to-have: WordPress security, CVE attribution, Coraza or other WAF engines, security research background, Linux server administration.

Responsibilities

• Own the vulnerability response pipeline from intake to disclosure.
• Expand automated protection to ModSecurity and Coraza WAF rules.
• Develop and maintain ModSecurity/SecLang rules.
• Build automated test harnesses to minimize false positives.
• Integrate AI into vulnerability analysis and rule generation with validation.
• Lead and mentor security analysts and manage priorities.
• Monitor KPIs like time-to-protection and coverage of critical vulnerabilities.
• Automate security advisories and coordinate with marketing.
• Analyze disclosures and translate findings into defensive rules.
• Balance speed and precision to protect customers without blocking traffic.
• Drive continuous improvement of automation and testing.

Skills

WAF engineering

ModSecurity/SecLang

Python

CI/CD

AI/LLM usage

Leadership

Threat analysis

Tools

Coraza WAF

OWASP CRS

WordPress security

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response to head an AI-assisted vulnerability pipeline for protecting websites. You will extend WAF rules, supervise a small team, and collaborate across teams to ensure rapid, accurate protection.

Experience in ModSecurity/Coraza, PHP source analysis, and Python automation is required. This role offers remote work with international scope and a focus on customer protection and fast response.