Lead Security Engineer: AI-Driven Vulnerability Response

Real Work From Anywhere Ltd.; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work with flexible hours

Paid 24 days vacation per year

National holidays

Unlimited sick leaves

Private medical insurance

Co-working reimburs ement

Gym reimbursement

Budget for education

Innovation reward program

Job summary

CloudLinux is a global remote-first company delivering high-volume, low-cost Linux infrastructure and security products. We seek a Lead Security Engineer to own the vulnerability response pipeline end to end and lead a small team of analysts in building AI-assisted detection and advisory systems.

You will extend our WordPress protection to ModSecurity/Coraza rules, write WAF rules, and drive fast, accurate protection while maintaining site stability and customer trust.

Qualifications

• 5+ years in web/application security or related field.
• Deep understanding of web attack classes and detection in HTTP traffic.
• Hands-on experience writing WAF rules (ModSecurity/SecLang or similar).
• Able to read PHP code and understand advisories or patches.
• Strong Python for automation; CI/CD and automated testing.
• Familiar with AI/LLM tools and verification practices.
• Proven track record leading a technical project end-to-end.
• Product mindset with customer impact in mind.
• Upper-intermediate English or better.

Responsibilities

• Design and build an AI-driven vulnerability response pipeline from disclosure to advisory.
• Extend WordPress-plugin pipeline to ModSecurity/Coraza rules.
• Write and review WAF rules for real-world vulnerabilities.
• Create test harnesses to validate rules against exploits and traffic.
• Lead security analysts, set priorities, and remove blockers.
• Define and monitor time-to-protection, coverage, and false positives.
• Automate advisory generation and align with marketing.

Skills

Web security

WAF engineering

Python

AI/LLM tools

Team leadership

Product mindset

English proficiency

Tools

ModSecurity/SecLang

OWASP CRS

Regular expressions

Job description

CloudLinux is a global remote-first company delivering high-volume, low-cost Linux infrastructure and security products. We seek a Lead Security Engineer to own the vulnerability response pipeline end to end and lead a small team of analysts in building AI-assisted detection and advisory systems.

You will extend our WordPress protection to ModSecurity/Coraza rules, write WAF rules, and drive fast, accurate protection while maintaining site stability and customer trust.