Remote Node.js Security Engineer - Proactive Defense

CloudLinux; Lisboa; Remote; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Fully remote work with flexible hours

Education and training budget

Private medical insurance

Vacation and holidays: 24 days + 10

Job summary

CloudLinux is a global remote-first company focused on Linux infrastructure and security products. We seek an experienced researcher or engineer to build a brand-new runtime protection layer for Node.js, integrating threat intelligence and scalable detection.

You will own the product direction, architectural decisions, and end-to-end delivery, working remotely with flexible hours. The role emphasizes security fundamentals, practical exploitation awareness, and the ability to drive

Qualifications

• Familiarity with the Node.js runtime and the JavaScript ecosystem.
• Strong web application security fundamentals and current knowledge of practical exploitation.
• A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code.
• Ability to start as the PM, architect, lead engineer, and QA for this product.

Responsibilities

• Own a brand-new product line and define its scope and customer surface.
• Design the technical approach and instrumentation strategy for runtime protection in Node.js.
• Build end-to-end implementation with provided tooling and resources.
• Define how detection logic is built and validated at scale.
• Integrate cross-layer threat intelligence into the product roadmap.

Skills

Node.js runtime

Security fundamentals

Detection at scale

PM/architect/lead/QA leadership

Tools

Dev infra tooling

JavaScript ecosystem

Job description

CloudLinux is a global remote-first company focused on Linux infrastructure and security products. We seek an experienced researcher or engineer to build a brand-new runtime protection layer for Node.js, integrating threat intelligence and scalable detection.

You will own the product direction, architectural decisions, and end-to-end delivery, working remotely with flexible hours. The role emphasizes security fundamentals, practical exploitation awareness, and the ability to drive