Remote AI Security Lead - Vulnerability Response

Jobgether; Italia; Remote; EUR 110,000 - 150,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days per year

Public holidays 10 days

Sick leave: Unlimited

Healthcare support

Coworking reimbursement

Sports and wellness reimbursement

Professional development budget

Leadership opportunities

Flexible remote-first culture

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Italy. You will own an AI-assisted vulnerability response pipeline and expand protection to ModSecurity and Coraza WAF rules.

You will lead a small security analysts team, validate rules with automated tests, and collaborate with marketing to publish advisories. This remote-first role emphasizes rapid response and customer protection.

Qualifications

• 5+ years of experience in web or application security.
• Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal...).
• Strong experience writing WAF rules with ModSecurity/SecLang, CRS, or similar.
• Regex proficiency to translate attack patterns into rules.
• Ability to read PHP source and interpret advisories/patches.
• Strong Python skills for automation pipelines.
• Experience with CI/CD and automated testing.
• Hands-on use of AI/LLM tools with validation of outputs.
• Proven leadership of technical projects from design to deployment.
• Product mindset evaluating tech decisions by customer impact and risk.
• Clear communication and cross-functional collaboration.
• Ability to stay calm under pressure during incidents.
• English at upper-intermediate level or higher.

Responsibilities

• Own the vulnerability response pipeline end-to-end, from intake to disclosure.
• Expand automated WAF protection to ModSecurity and Coraza rules.
• Develop and maintain ModSecurity/SecLang rules to detect real vulnerabilities.
• Build automated test harnesses to validate rules and minimize false positives.
• Integrate AI into vulnerability analysis and rule generation with proper validation.
• Lead and mentor security analysts, managing priorities and blockers.
• Define and monitor KPIs like time-to-protection and coverage.
• Automate security advisories and coordinate with marketing for publication workflows.
• Analyze vulnerabilities from disclosures and advisories to craft defensive rules.
• Balance speed and precision to protect customers without blocking legitimate traffic.
• Drive continuous improvement of the pipeline with emerging threats.

Skills

Web security

WAF engineering

Python

CI/CD

AI/LLM usage

Leadership

Tools

ModSecurity/SecLang

OWASP CRS

WordPress security

Coraza WAF

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Italy. You will own an AI-assisted vulnerability response pipeline and expand protection to ModSecurity and Coraza WAF rules.

You will lead a small security analysts team, validate rules with automated tests, and collaborate with marketing to publish advisories. This remote-first role emphasizes rapid response and customer protection.