Remote Lead Security Engineer – AI Vulnerability Response

Jobgether; España; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days

Public holidays 10 days

Sick leave

Healthcare support

Coworking reimbursement

Education budget

Innovation reward

Leadership opportunities

Remote-first culture

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) to own an AI-assisted pipeline protecting web applications. You will extend ModSecurity/Coraza rules, validate protections, and lead a small security team in a remote-first environment.

Responsibilities include building end-to-end workflows, integrating AI tools, and delivering rapid, accurate defenses while collaborating with cross-functional teams. English proficiency required.

Qualifications

• 5+ years in web/application security, with vulnerability research or WAF work.
• Deep knowledge of web attack classes (SQLi, XSS, RCE, etc.).
• Strong experience writing WAF rules (ModSecurity/SecLang).
• Regex mastery to translate attacks into rules.
• Ability to read PHP source and security advisories.
• Proficient in Python and automation pipelines.
• Experience with CI/CD and automated testing.
• Hands-on use of AI/LLM tools with validation.

Responsibilities

• Own the vulnerability response pipeline from intake to public disclosure.
• Expand automated WAF protection to ModSecurity and Coraza.
• Develop and maintain ModSecurity/SecLang rules.
• Build automated test harnesses to minimize false positives.
• Lead security analysts and mentor the team.
• Automate security advisories and collaborate with marketing.

Skills

Web security

Vulnerability research

WAF engineering

ModSecurity/SecLang

Python programming

CI/CD workflows

AI/LLM tools

Threat analysis

Rule writing

Communication

Education

Tools

OWASP CRS

Coraza WAF

WordPress security

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) to own an AI-assisted pipeline protecting web applications. You will extend ModSecurity/Coraza rules, validate protections, and lead a small security team in a remote-first environment.

Responsibilities include building end-to-end workflows, integrating AI tools, and delivering rapid, accurate defenses while collaborating with cross-functional teams. English proficiency required.