Lead Security Engineer: AI-Driven Vulnerability Response

Jobgether; Australia; Remote; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days annually

Public holidays 10 days

Sick leave unlimited

Healthcare support reimbursement

Coworking reimbursement

Wellness and gym reimbursement

Education budget for development

Innovation rewards

Job summary

Jobgether is seeking a Lead Security Engineer - Vulnerability Response (Imunify360) based in Australia. You will own an AI-assisted vulnerability response pipeline, extend WAF protections to ModSecurity and Coraza, and lead a small security team to accelerate protection and reduce false positives.

You will work in a remote-first environment, with a focus on production-ready defenses, automation, threat analysis, and collaboration with cross-functional teams to protect customer websites worldwide.

Qualifications

• 5+ years in web or application security, including vulnerability research and WAF engineering.

Responsibilities

• Own the vulnerability response pipeline from intake to public disclosure.
• Expand automated WAF protection to ModSecurity and Coraza rules.
• Write and refine ModSecurity/SecLang rules to detect real-world vulnerabilities.
• Build automated test harnesses to minimize false positives and protect customer sites.
• Lead security analysts and mentor the team for rapid, reliable protection.

Skills

WAF rules

ModSecurity/SecLang

Python automation

CI/CD

AI/LLM usage

Security leadership

PHP knowledge

Vulnerability analysis

Threat intelligence

Tools

Coraza WAF

OWASP CRS

Job description

Jobgether is seeking a Lead Security Engineer - Vulnerability Response (Imunify360) based in Australia. You will own an AI-assisted vulnerability response pipeline, extend WAF protections to ModSecurity and Coraza, and lead a small security team to accelerate protection and reduce false positives.

You will work in a remote-first environment, with a focus on production-ready defenses, automation, threat analysis, and collaboration with cross-functional teams to protect customer websites worldwide.