Lead Vulnerability Response Engineer - AI-Driven, Remote

CloudLinux Inc.; Madrid; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Fully remote work

Flexible hours

Paid vacation 24 days/year

10 national holidays included

Unlimited sick leave

Private medical insurance

Co-working and gym reimbursement

Education budget

Job summary

CloudLinux Inc. is seeking a Lead Security Engineer - Vulnerability Response to own and extend the vulnerability response pipeline end to end.

You will combine deep web application security expertise with strong automation, leading a small team of security analysts and collaborating with automation, QA, and marketing. You will design AI-driven processes, write and review ModSecurity/Coraza rules, and drive time-to-protection metrics while maintaining system stability on shared hosting

Qualifications

• 5+ years in web/application security including vulnerability research and WAF engineering.
• Deep understanding of web attack classes and detection in HTTP traffic.
• Hands-on experience writing WAF rules and regex patterns.
• Strong Python for automation pipelines in production.
• Upper-intermediate English or better.

Responsibilities

• Design and build AI-driven vulnerability response pipeline from disclosure to advisory.
• Extend WordPress-plugin pipeline to ModSecurity/Coraza rules.
• Write and review WAF rules for real-world vulnerabilities.
• Build test harnesses to validate rules against exploits and traffic.
• Lead and mentor security analysts and coordinate with automation/QA/marketing.
• Define and track time-to-protection, coverage, and false positives.
• Automate advisory generation with marketing review flow.

Skills

Web security

WAF rules

Python automation

PHP code reading

AI/LLM tooling

Leadership

Product mindset

English proficiency

Threat/attack knowledge

Tools

ModSecurity/SecLang

OWASP CRS

Regular expressions

Coraza

Job description

CloudLinux Inc. is seeking a Lead Security Engineer - Vulnerability Response to own and extend the vulnerability response pipeline end to end.

You will combine deep web application security expertise with strong automation, leading a small team of security analysts and collaborating with automation, QA, and marketing. You will design AI-driven processes, write and review ModSecurity/Coraza rules, and drive time-to-protection metrics while maintaining system stability on shared hosting