Lead Security Engineer - AI-Driven Vulnerability Response (Remote)

CloudLinux Inc.

Województwo mazowieckie

Remote

PLN 180,000 - 280,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Fully remote with flexible hours

Paid vacation and holidays

Private medical insurance

Co-working and gym reimbursement

Education budget

Patent reward program

Job summary

CloudLinux is seeking a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. You will own the vulnerability response pipeline end to end, combining web security expertise with automation, and lead a small team of security analysts to deliver rapid protection and public advisories.

You will extend our WordPress/plugin pipeline to ModSecurity/Coraza rules, write WAF rules, and automate advisory generation.

Qualifications

5+ years in web/application security.
Deep understanding of web attack classes and HTTP traffic detection.
Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar).
Able to read PHP code and understand a vulnerability from advisories.
Strong Python for automation pipelines, CI/CD, testing.
Daily use of AI/LLM tools with verification.
Proven track record leading a technical project end to end.
Product mindset focusing on customer impact.
Upper-intermediate English or better.

Responsibilities

Design and build the AI-driven vulnerability pipeline from disclosure to public advisory.
Extend WordPress-plugin pipeline to ModSecurity/Coraza rules.
Write and review WAF rules for real-world vulnerabilities.
Build test harnesses to validate rules against exploits and traffic.
Lead and mentor security analysts; set priorities and unblock blockers.
Define and track time-to-protection, coverage, and false positives; improve them.
Automate advisory generation and coordinate with marketing.