Lead Security Engineer - AI-Driven Vulnerability Response (Remote)

Jobgether; México; Remote; MXN 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation

Public holidays

Sick leave

Healthcare support

Coworking reimbursement

Sports and wellness

Professional development

Innovative contributions

Technical challenges

Leadership opportunities

Remote-first culture

Salary not specified

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Mexico. You will own an AI-assisted vulnerability response pipeline, extend WAF rules to ModSecurity and Coraza, and lead a small security team to protect customer websites with rapid, validated defenses.

You will design automated testing, leverage AI for rule generation, and collaborate with marketing to publish advisories.

Qualifications

• At least 5 years of experience in web or application security.
• Deep understanding of SQLi, XSS, RCE, authentication bypass, path traversal, file upload vulnerabilities, and insecure deserialization.
• Strong experience writing WAF rules using ModSecurity/SecLang, CRS, or similar.
• Regex proficiency to translate attack patterns into detection rules.
• Ability to read PHP source code and interpret advisories/patch diffs.
• Strong Python programming skills for automation pipelines.
• Experience with CI/CD, automated testing, and integrating validation into delivery.
• Experience with AI/LLM tools with ability to verify outputs.
• Leadership experience delivering security projects end to end.
• Product-minded with focus on customer impact and risk.
• Strong ownership and problem-solving, identifying bottlenecks.
• Clear communication for cross-functional teams.
• English at upper-intermediate or higher.

Responsibilities

• Own the vulnerability response pipeline: design, build, and operate end-to-end workflow.
• Expand automated WAF protection to ModSecurity and Coraza rules.
• Develop and maintain ModSecurity/SecLang rules to detect vulnerabilities.
• Validate protection before release with automated testing and traffic analyses.
• Integrate AI into security workflows with validation processes.
• Lead and mentor security analysts and remove blockers.
• Measure time-to-protection, coverage, and false-positives, improving outcomes.
• Automate security advisories and coordinate with marketing for publication workflows.
• Analyze vulnerabilities and exploits to translate findings into rules.
• Balance speed and precision to protect customers without blocking legitimate traffic.
• Drive continuous improvement across the vulnerability response pipeline.

Skills

Web security

WAF engineering

Regex patterns

PHP source

Python automation

CI/CD

AI/LLM tools

Technical leadership

Product mindset

Problem solving

Communication

English proficiency

Tools

ModSecurity

Coraza

WordPress

OWASP CRS

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Mexico. You will own an AI-assisted vulnerability response pipeline, extend WAF rules to ModSecurity and Coraza, and lead a small security team to protect customer websites with rapid, validated defenses.

You will design automated testing, leverage AI for rule generation, and collaborate with marketing to publish advisories.