Remote Security Engineer - Vulnerability Response Lead

Jobgether; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Fully remote work worldwide

Paid vacation 24 days

Public holidays 10 days

Sick leave unlimited

Healthcare support

Coworking reimbursement

Gym membership reimbursement

Education budget

Innovation reward

Technical challenges

Leadership opportunities

Flexible remote-first culture

Job summary

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in the United States. You will build and own an AI-assisted vulnerability response pipeline to protect customer websites, extending ModSecurity and Coraza rules, and lead a small security team.

This remote-first role requires strong web security expertise, Python automation, AI/LLM tooling, and collaboration with product, QA, and marketing to validate defenses, publish advisories, and continuously improve

Qualifications

• 5+ years of experience in web or application security.
• Deep understanding of web attack classes: SQLi, XSS, RCE, path traversal, file upload, insecure deserialization.
• Strong experience writing WAF rules using ModSecurity/SecLang, CRS, or similar.
• Regex proficiency to translate attack patterns into detection rules.
• Ability to read PHP source code and security advisories.
• Strong Python programming for automation pipelines.
• Experience with CI/CD and automated testing.
• Hands-on use of AI/LLM tools with verification.
• Proven ability to lead technical projects end-to-end.
• Product-minded with customer impact and risk perspective.
• Strong ownership and problem-solving skills.
• Clear communication across cross-functional teams.
• English: upper-intermediate or higher.

Responsibilities

• Own the vulnerability response pipeline end-to-end: intake, triage, analysis, AI-assisted rule generation, testing, release, and disclosure.
• Extend automated WAF protection from WordPress to ModSecurity and Coraza rules.
• Develop and maintain security rules to detect real-world web vulnerabilities.
• Build automated test harnesses to validate rules against exploits and realistic traffic.
• Integrate AI into security workflows with validation processes.
• Lead and mentor security analysts and manage priorities.
• Define, monitor, and improve KPIs like time-to-protection and coverage.
• Automate security advisories and coordinate with marketing for publication workflows.
• Analyze vulnerabilities and exploits to translate findings into defenses.
• Balance speed and precision under pressure while protecting customers.
• Drive continuous improvement of the vulnerability response pipeline.

Skills

Security leadership

Vulnerability research

WAF engineering

ModSecurity/SecLang

Python automation

CI/CD

AI/LLM tools

Team mentoring

Product mindset

Communication

English proficiency

Tools

ModSecurity/SecLang

Coraza WAF

OWASP CRS

WordPress security tooling

Job description

Jobgether is seeking a Lead Security Engineer – Vulnerability Response (Imunify360) based in the United States. You will build and own an AI-assisted vulnerability response pipeline to protect customer websites, extending ModSecurity and Coraza rules, and lead a small security team.

This remote-first role requires strong web security expertise, Python automation, AI/LLM tooling, and collaboration with product, QA, and marketing to validate defenses, publish advisories, and continuously improve