Lead Security Engineer AI-Driven Vulnerability Response

Jobgether; Turkey; Remote; TRY 300,000 - 600,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days

Public holidays 10 days

Sick leave unlimited

Health insurance support

Coworking reimbursement

Gym reimbursement

Education budget

Leadership opportunities

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Turkey. You will own the end-to-end vulnerability response pipeline, extending WAF coverage to ModSecurity and Coraza, and leading a small security team in a remote-first environment.

You will combine web security expertise with automation, AI-assisted rule generation, and collaboration with marketing/QA to accelerate detection, validation, and protection while publishing advisories.

Qualifications

• At least 5 years of experience in web or application security; vulnerability research, detection engineering, or related fields.
• Deep understanding of web attack classes including SQLi, XSS, RCE, auth bypass, path traversal, file upload, insecure deserialization.
• Experience writing WAF rules with ModSecurity/SecLang, CRS, or similar tools.
• Regular expressions proficiency; translate attack patterns into rules.
• Ability to read PHP source and understand vulnerabilities via advisories/patches.
• Strong Python programming and automation experience.
• Experience with CI/CD and automated testing integrations.
• Hands-on use of AI/LLM tools with validation of outputs.
• Ability to lead a technical project end to end.
• Product-minded to balance customer impact and risk.
• Clear communication and cross-functional collaboration.
• Stays calm and makes sound decisions under pressure.
• English at upper-intermediate level or higher.

Responsibilities

• Own the vulnerability response pipeline end-to-end from intake to disclosure.
• Expand automated WAF protection to ModSecurity and Coraza rules.
• Develop and maintain ModSecurity/SecLang rules to detect real-world vulnerabilities.
• Validate protections with automated test harnesses to minimize false positives.
• Integrate AI into vulnerability analysis and rule generation with validation.
• Lead and mentor security analysts and manage priorities.
• Define and monitor KPIs for time-to-protection and coverage.
• Automate security advisories and collaborate with marketing for publication.
• Analyze vulnerabilities and exploits to translate findings into rules.
• Balance speed and precision to protect customers without blocking traffic.
• Drive continuous improvement of the pipeline and tooling.

Skills

Web security

WAF engineering

ModSecurity/SecLang

Regex skills

PHP analysis

Python automation

CI/CD

AI/LLM use

Technical leadership

Product mindset

Communication

Calm under pressure

Tools

Coraza WAF

WordPress security plugin

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in Turkey. You will own the end-to-end vulnerability response pipeline, extending WAF coverage to ModSecurity and Coraza, and leading a small security team in a remote-first environment.

You will combine web security expertise with automation, AI-assisted rule generation, and collaboration with marketing/QA to accelerate detection, validation, and protection while publishing advisories.