Lead Security Engineer: AI-Driven Vulnerability Response (Remote)

CloudLinux Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Flexible hours

Vacation days

National holidays

Medical insurance

Gym reimbursement

Education budget

Patent reward

Job summary

CloudLinux, a global remote-first company, is seeking a Lead Security Engineer - Vulnerability Response to own the end-to-end vulnerability pipeline. You will combine deep web app security expertise with automation, leading a small team of security analysts.

You will design AI-driven processes to detect new vulnerabilities, draft and test WAF rules, and craft public advisories, extending WordPress protections to ModSecurity/Coraza.

Qualifications

• 5+ years in web/application security: vulnerability research or related.
• Deep understanding of web attacks and detection in HTTP traffic.
• Hands-on experience writing WAF rules; read PHP code.
• Strong Python for automation; CI/CD and testing.

Responsibilities

• Design and build the AI-driven vulnerability response pipeline from disclosure to advisory.
• Extend WordPress-plugin pipeline to ModSecurity/Coraza rules.
• Write and review WAF rules for real-world vulnerabilities.
• Build test harnesses to verify rules against exploits and traffic.
• Lead and mentor security analysts; set priorities and remove blockers.
• Define and track time-to-protection, coverage and false positives.
• Automate advisory generation and align with marketing.

Skills

Web/application security

Vulnerability research

Automation pipelines

Python

AI/LLM tooling

Product mindset

English communication

Tools

ModSecurity/SecLang

OWASP CRS

Regular expressions

Coraza (WAF)

WordPress security

Job description

CloudLinux, a global remote-first company, is seeking a Lead Security Engineer - Vulnerability Response to own the end-to-end vulnerability pipeline. You will combine deep web app security expertise with automation, leading a small team of security analysts.

You will design AI-driven processes to detect new vulnerabilities, draft and test WAF rules, and craft public advisories, extending WordPress protections to ModSecurity/Coraza.