Lead Security Engineer – AI-Driven Vulnerability Response

Jobgether; France; Remote; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Fully remote work worldwide

Paid vacation 24 days

Public holidays 10 days

Sick leave

Healthcare support

Coworking reimbursement

Gym reimbursement

Education budget

Leadership opportunities

Remote-first culture

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in France. You will own an AI-assisted vulnerability response pipeline, extend protection to ModSecurity and Coraza WAF rules, and lead a small security team to rapidly protect customer sites.

You will develop and maintain ModSecurity/SecLang rules, validate protections with automated tests, and drive AI-enabled automation while coordinating with marketing for advisories.

Qualifications

• 5+ years of experience in web or application security
• Deep understanding of web attack classes (SQLi, XSS, RCE, path traversal, file upload)
• Strong experience writing WAF rules with ModSecurity/SecLang or CRS
• Ability to read PHP source code and understand advisories
• English proficiency at upper-intermediate level or higher

Responsibilities

• Own the vulnerability response pipeline end-to-end
• Expand automated WAF protection to ModSecurity and Coraza
• Develop and maintain security rules for real-world vulnerabilities
• Validate protection with automated testing to minimize false positives
• Integrate AI into vulnerability analysis and rule generation
• Lead and mentor security analysts
• Define and monitor KPIs like time-to-protection and coverage
• Automate security advisories and publication workflows
• Analyze vulnerabilities and translate findings into defensive rules
• Balance speed and precision to protect customers without blocking traffic
• Drive continuous improvement of the pipeline with emerging threats

Skills

Vulnerability research

WAF engineering

Python

CI/CD

AI/LLM usage

Leadership

English proficiency

Tools

ModSecurity/SecLang

OWASP CRS

Coraza WAF

WordPress security

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in France. You will own an AI-assisted vulnerability response pipeline, extend protection to ModSecurity and Coraza WAF rules, and lead a small security team to rapidly protect customer sites.

You will develop and maintain ModSecurity/SecLang rules, validate protections with automated tests, and drive AI-enabled automation while coordinating with marketing for advisories.