Lead Security Engineer: AI-Driven Vulnerability Response

CloudLinux Inc.; Warszawa; Remote; PLN 550,000 - 786,000; Full time

Benefits offered by this job

Remote work

Vacation days

Healthcare

Coworking & gym

Education budget

Patent rewards

Job summary

CloudLinux Inc. is seeking a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. You will own the vulnerability response pipeline end-to-end, combining application security expertise with automation to build, test, and deploy AI-assisted protection and public advisories.

You will mentor security analysts, extend WordPress-plugin pipelines to ModSecurity/Coraza, and drive metrics for time-to-protection, coverage, and false positives in a fully remote setting.

Qualifications

• 5+ years in web/application security: vulnerability research, detection engineering or similar.
• Hands-on experience writing WAF rules (ModSecurity/SecLang) and regular expressions.
• Able to read PHP code and understand a vulnerability from an advisory or patch.

Responsibilities

• Design and build the AI-driven vulnerability response pipeline from disclosure to public advisory.
• Lead extension of WordPress-plugin pipeline to ModSecurity/Coraza rules.
• Write and review WAF rules for real-world web vulnerabilities.
• Build test harnesses that check rules against exploits and real traffic.

Skills

Web security

Web attacks

WAF rules

PHP code

Python

AI/LLM

Project leadership

Product mindset

English

Tools

ModSecurity

Coraza

OWASP CRS

Job description

CloudLinux Inc. is seeking a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. You will own the vulnerability response pipeline end-to-end, combining application security expertise with automation to build, test, and deploy AI-assisted protection and public advisories.

You will mentor security analysts, extend WordPress-plugin pipelines to ModSecurity/Coraza, and drive metrics for time-to-protection, coverage, and false positives in a fully remote setting.