Lead Security Engineer – Vulnerability Response, Imunify360

This is a fully remote position, open to applicants in Poland, +5 more countries.

📋 Description

• Design and develop an AI-driven pipeline that encompasses the journey from vulnerability disclosure to public announcement, which includes intake, triage, drafting rules, testing, releasing, and providing advisories.

• Enhance the current WordPress-plugin pipeline to integrate ModSecurity/Coraza rules.

• Craft and assess WAF rules using ModSecurity/SecLang to address real-world web vulnerabilities.

• Create test harnesses to evaluate rules against exploits and actual traffic prior to release.

• Lead and mentor security analysts by setting priorities, reviewing their work, and eliminating obstacles.

• Define and monitor key metrics such as time-to-protection, vulnerability coverage, and false-positive rates.

• Automate the generation of advisories and collaborate with marketing to establish the format and review process.

• Take ownership of the end-to-end vulnerability response pipeline, serving as its primary architect.

• Collaborate closely with automation, QA, and marketing teams.

⛳️ Requirements

• Over 5 years of experience in web/application security, including fields such as vulnerability research, detection engineering, WAF engineering, or related areas.

• Comprehensive knowledge of web attack types, including SQL injection, cross-site scripting, remote code execution, authentication bypass, path traversal, file upload, and deserialization, along with the ability to detect these in HTTP traffic.

• Practical experience in writing WAF rules using ModSecurity/SecLang, OWASP CRS, or similar technologies, as well as familiarity with regular expressions.

• Capability to read PHP code and comprehend vulnerabilities as detailed in advisories or patch diffs.

• Strong proficiency in Python, particularly in building automation pipelines for production environments.

• Experience with CI/CD processes and automated testing methodologies.

• Regular use of AI/LLM tools with the ability to validate their outputs effectively.

• Demonstrated success in leading technical projects from inception to completion.

• A product-oriented mindset that prioritizes customer impact.

• Proficient in English at an upper-intermediate level or higher.

• Familiarity with WordPress ecosystem security, vulnerability feeds, CVE credits, or bug bounty programs is advantageous.

• Experience with Coraza or other WAF engines is a plus.

• Background in exploit analysis or threat intelligence is beneficial.

• Experience in Linux server administration or the hosting industry is a plus.

🏝️ Benefits

• Emphasis on professional development.

• Engaging and challenging projects.

• Fully remote work with flexible hours, allowing work from any location around the globe.

• Paid vacation of 24 days annually.

• 10 days designated for national holidays.

• Unlimited sick leave.

• Compensation for private medical insurance.

• Reimbursement for co-working expenses.

• Gym and sports expense reimbursement.

• Budget allocated for educational purposes.

• Opportunity to earn a reward for the most innovative idea that the company can patent.