Staff Security Engineer: Malware Defense & Incident Response

CloudLinux Inc.; Warszawa; Hybrid; PLN 505,000 - 661,000; Full time

Job summary

CloudLinux Inc. is seeking a Staff Security Engineer for Imunify360 to own end-to-end security challenges on Linux web servers. This hands-on technical leadership role focuses on practical engineering rather than SOC monitoring, threat research, or management. You will analyze threats, develop detections, and collaborate across engineering and support.

You will drive security improvements, mentor teammates, and coordinate with vendors and CERTs to ensure robust protection at scale.

Responsibilities

• Lead response to large-scale exploitation and malware campaigns: triage, root cause, and mitigation across every protection layer of the product.
• Reverse-engineer malware and exploits targeting Linux servers and web applications.
• Track campaigns over time: cluster indicators, connect activity to known actors and toolkits, anticipate the next variant.
• Define and run measurable outcomes per campaign: time to detect, time to protect, cleanup effectiveness, reinfection rate.
• Own the security incident and response process: severity model, runbooks, communication, escalation.
• Coordinate with external parties — software vendors, partners, CERTs/CSIRTs, abuse desks, other security vendors.
• Drive responsible disclosure where vulnerabilities are found and be the technical voice in advisories and partner briefings.
• Triage external vulnerability reports.
• Red-team our product and infrastructure; threat-model new features before they ship; own the security review gate for high-risk changes.
• Turn findings into fixes with owning teams, not just reports.
• Raise the quality bar of detections with budgets, test corpora, rollout gates and fast rollback.
• Build and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage.
• Write production code for these tools; 30–50% of time hands-on building.
• Turn telemetry into intelligence: emerging exploits, attacker infrastructure, trends—shared as internal briefs and select public research.
• Mentor analysts and engineers; raise security skill across teams; bar-raiser in hiring.

Job description

CloudLinux Inc. is seeking a Staff Security Engineer for Imunify360 to own end-to-end security challenges on Linux web servers. This hands-on technical leadership role focuses on practical engineering rather than SOC monitoring, threat research, or management. You will analyze threats, develop detections, and collaborate across engineering and support.

You will drive security improvements, mentor teammates, and coordinate with vendors and CERTs to ensure robust protection at scale.