Lead Security Engineer - AI-Driven Vulnerability Response

Jobgether; Oregon; Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Fully remote

Paid vacation

Healthcare support

Education budget

Remote-first culture

Job summary

Jobgether is seeking a Lead Security Engineer - Vulnerability Response (Imunify360) based in the United States. You will own an AI-assisted vulnerability response pipeline and extend WAF protection to ModSecurity/Coraza rules to defend WordPress websites.

You will lead a small team of security analysts, collaborating with automation, QA and marketing to accelerate vulnerability disclosure to protection and public advisory processes.

Qualifications

• Minimum 5 years in web or application security, vulnerability research or related field.
• Deep understanding of web attack classes (SQLi, XSS, RCE, etc.).
• Hands-on experience writing WAF rules using ModSecurity/SecLang or CRS.
• Proficient in Python for automation and tooling.
• Ability to design end-to-end vulnerability response pipelines.
• Experience with AI/LLM tools and validating generated outputs.

Responsibilities

• Own and operate the vulnerability response pipeline from intake to disclosure.
• Extend AI-assisted protection to ModSecurity and Coraza WAF rules.
• Develop and maintain detection rules and testing harnesses.
• Lead a small security analysts team and mentor engineers.
• Collaborate with automation, QA and marketing for rapid protection.
• Analyze disclosures and translate findings into effective defenses.
• Balance speed and accuracy to protect customers without blocking traffic.

Skills

Web security

WAF rules

Python

CI/CD

AI/LLM tooling

Leadership

Product mindset

Communication

PHP code analysis

Regex proficiency

Tools

Coraza

WordPress security

WPScan

Patchstack

Job description

Jobgether is seeking a Lead Security Engineer - Vulnerability Response (Imunify360) based in the United States. You will own an AI-assisted vulnerability response pipeline and extend WAF protection to ModSecurity/Coraza rules to defend WordPress websites.

You will lead a small team of security analysts, collaborating with automation, QA and marketing to accelerate vulnerability disclosure to protection and public advisory processes.