Lead Security Engineer: AI-Powered Vulnerability Response

Jobgether; As Sudiyah; Remote; OMR 46,000 - 69,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days

Public holidays 10 days

Unlimited sick leave

Private medical-insurance support

Coworking reimbursement

Wellness/fitness reimbursement

Education budget

Innovation rewards

Technical challenges

Leadership opportunities

Flexible remote-first culture

Job summary

Jobgether seeks a Lead Security Engineer – Vulnerability Response (Imunify360) for a remote-first role. You will own an AI-assisted vulnerability pipeline, extend WAF protections with ModSecurity/Coraza, and lead a small security team to protect customer websites worldwide.

You will write rules, analyze exploits, and validate protections with automated tests, balancing speed and accuracy in a fast-moving environment.

Qualifications

• 5+ years in web or application security including vulnerability research and WAF engineering.
• Deep understanding of SQLi, XSS, RCE, auth bypass, path traversal and deserialization.
• Proficient in writing ModSecurity/SecLang rules and CRS.
• Regex skills to translate attack patterns into rules.
• Read PHP source code and security advisories for vulnerability insight.
• Strong Python for automation pipelines.
• Experience with CI/CD and automated testing.
• Experience with AI/LLM tools for security analysis.
• Leadership experience guiding security analysts.
• Excellent communication and calm under pressure.
• English proficiency at upper-intermediate level or higher.

Responsibilities

• Own the vulnerability response pipeline end-to-end from intake to disclosure.
• Expand automated protection to ModSecurity and Coraza rules.
• Develop and maintain ModSecurity/SecLang rules and CRS coverage.
• Validate protections with automated tests to minimize false positives.
• Lead and mentor security analysts and cross-functional teammates.
• Define KPIs and monitor time-to-protection and coverage.

Skills

Web security

Python

CI/CD

AI/LLM

Leadership

Regex

PHP analysis

Threat analysis

Communication

Tools

ModSecurity/SecLang

Coraza WAF

OWASP CRS

WordPress security tools

Job description

Jobgether seeks a Lead Security Engineer – Vulnerability Response (Imunify360) for a remote-first role. You will own an AI-assisted vulnerability pipeline, extend WAF protections with ModSecurity/Coraza, and lead a small security team to protect customer websites worldwide.

You will write rules, analyze exploits, and validate protections with automated tests, balancing speed and accuracy in a fast-moving environment.