Lead Security Engineer — Vulnerability Response (Remote)

CloudLinux Inc.; United States; A distancia; USD 150.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote work

Flexible working hours

Paid vacation (24 days)

National holidays paid

Private medical insurance

Co-working and gym reimbursement

Education budget

Innovation reward program

Descripción de la vacante

CloudLinux Inc. is a global, remote-first company seeking a Lead Security Engineer - Vulnerability Response to join our Web Protection Team.

You will design and automate the vulnerability intake to advisory pipeline, extend security tooling to ModSecurity/Coraza, and write WAF rules for real-world web vulnerabilities. You will lead analysts, track protection metrics, and automate advisory generation with marketing alignment.

Formación

• 5+ years in web/application security
• Hands-on experience writing WAF rules (ModSecurity/SecLang) and regular expressions
• Excellent English communication and leadership abilities
• Product-minded with customer impact focus

Responsabilidades

• Design and build AI-driven vulnerability pipeline from disclosure to announcement
• Lead extension of WordPress-plugin pipeline to ModSecurity/Coraza rules
• Write and review WAF rules for real-world web vulnerabilities
• Build test harnesses to validate rules against exploits and traffic
• Lead and mentor security analysts and track metrics like time-to-protection and false positives

Descripción del empleo

CloudLinux Inc. is a global, remote-first company seeking a Lead Security Engineer - Vulnerability Response to join our Web Protection Team.

You will design and automate the vulnerability intake to advisory pipeline, extend security tooling to ModSecurity/Coraza, and write WAF rules for real-world web vulnerabilities. You will lead analysts, track protection metrics, and automate advisory generation with marketing alignment.