Lead Security Engineer - AI-Driven Vulnerability Response (Remote)

Jobgether; Netherlands; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Fully remote

Paid vacation

Public holidays

Sick leave

Healthcare support

Coworking reimbursement

Wellness reimbursement

Education budget

Innovative rewards

Challenging problems

Leadership opportunities

Flexible culture

Salary details to be confirmed

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in the Netherlands to lead an AI-assisted vulnerability response pipeline and extend WAF automation to ModSecurity and Coraza. You will manage a small team of security analysts and collaborate with automation, QA, and marketing to protect customer websites with fast, accurate defenses.

The role emphasizes production-ready rules, fast triage, and ongoing optimization of detection coverage, false positives,

Qualifications

• 5+ years in web or application security.
• Deep understanding of web attack classes (SQLi, XSS, RCE, etc).
• Experience writing WAF rules: ModSecurity/SecLang/CRS.
• Regular expressions for detection rules.
• Read and analyze PHP sources for vulnerabilities.
• Strong Python for automation pipelines.
• CI/CD workflows and automated testing.
• Hands-on with AI/LLM tools and validation of outputs.
• Leadership of a technical project end-to-end.
• Product-minded with customer impact focus.
• Strong ownership and problem solving.
• Clear communication with cross-functional teams.
• Calm under pressure and sound decision making.
• English upper-intermediate or higher.

Responsibilities

• Own the vulnerability response pipeline from intake to disclosure.
• Expand automated WAF protection to ModSecurity and Coraza.
• Develop and maintain ModSecurity/SecLang rules.
• Build automated test harnesses to validate rules against exploits.
• Integrate AI into vulnerability analysis and rule generation.
• Lead and mentor security analysts and unblock blockers.
• Measure outcomes: time-to-protection, coverage, false positives.
• Automate public advisory generation and publish workflows.
• Analyze vulnerabilities and translate findings into defenses.
• Balance speed and precision to avoid blocking legitimate traffic.
• Drive continuous improvement of the pipeline against emerging threats.

Skills

Web security

Vulnerability research

WAF engineering

ModSecurity/SecLang

Python automation

CI/CD

AI/LLM usage

Leadership

Communication

Threat analysis

Tools

Coraza WAF

WordPress

ModSecurity

LLM tools

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in the Netherlands to lead an AI-assisted vulnerability response pipeline and extend WAF automation to ModSecurity and Coraza. You will manage a small team of security analysts and collaborate with automation, QA, and marketing to protect customer websites with fast, accurate defenses.

The role emphasizes production-ready rules, fast triage, and ongoing optimization of detection coverage, false positives,