Staff Security Engineer, Imunify360

This is a fully remote position, open to applicants in Portugal, +3 more countries.

📋 Description

• Lead efforts to respond to large-scale exploitation and malware campaigns, which include triage, root cause analysis, and mitigation across all protection layers.

• Conduct reverse engineering of malware and exploits that target Linux servers and web applications.

• Monitor campaigns over time by clustering indicators, linking activities to known actors and toolkits, and predicting variants.

• Establish and execute measurable campaign outcomes, such as detection time, protection time, cleanup effectiveness, and reinfection rates.

• Oversee the security incident and response process for customer threats and product vulnerabilities, which encompasses severity models, runbooks, communications, and escalation protocols.

• Collaborate with software vendors, partners, CERTs/CSIRTs, abuse desks, and security vendors; promote responsible disclosure practices.

• Serve as the technical spokesperson in security advisories and partner briefings with Product and Support teams.

• Evaluate external vulnerability reports.

• Perform red-team assessments on the product and infrastructure, and threat-model new features prior to release.

• Manage the security review process for high-risk changes and convert findings into actionable fixes.

• Enhance detection quality through the use of false-positive budgets, test corpora, staged rollouts, measurement gates, and rollback strategies.

• Develop and automate analysis pipelines leveraging dynamic analysis, honeypots, telemetry-driven hunting, and ML-assisted triage when beneficial.

• Write production code for security tools, dedicating roughly 30–50% of time to hands-on development.

• Transform telemetry into actionable intelligence and disseminate internal briefs and selected public research.

• Mentor analysts and engineers, serving as a bar-raiser in security hiring processes.

• Achieve significant milestones at 30 days, 90 days, 6 months, and 12 months, including production detections, response processes, campaign post-mortems, red-team reviews, fixes, metrics, and public research or disclosures.

⛳️ Requirements

• 10+ years in security engineering, malware research, incident response, or offensive security, with several years of experience leading cross-team initiatives at Staff/Principal/Lead scope.

• Profound hands-on skills in malware analysis and reverse engineering.

• Strong experience in web application security and practical exploitation.

• Extensive Linux knowledge from both the attacker’s and defender’s perspectives.

• Demonstrated leadership in incident response during large-scale events: managing the response, drafting the advisory, and concluding the post-mortem.

• Proficient in production coding with Python along with a systems language (Go, Rust, or C).

• Experience in coordinated vulnerability disclosure and collaborating with the security community.

• Ability to write clearly and concisely for both technical and non-technical audiences; adept at working asynchronously across time zones.

• Daily user of AI tools for analysis and coding, with a strong critical judgment regarding their outputs.

• Background in hosting or large web ecosystems is desirable.

• Experience in detection authoring at scale (signatures, WAF/IDS rules) is a plus.

• Knowledge of kernel-level monitoring and rootkit detection is advantageous.

• Familiarity with threat intelligence practices and actor tracking is beneficial.

• Experience with ML for malware classification is a plus.

• A public track record including CVEs, published research, talks, CTFs, or open-source security tools is desirable.

• Relevant certifications are advantageous, though not mandatory.

🏝️ Benefits

• Maintain hands-on technical skills while managing complex, high-impact engineering projects.

• Tackle challenging issues related to Linux, automation, and cybersecurity across both mature and new products.

• Influence technical direction and contribute to significant architectural decisions.

• Work with a high degree of independence, ownership, and autonomy.

• Enjoy fully remote work with flexible working hours.

• Receive 24 paid vacation days, 10 national holidays, and unlimited sick leave.

• Benefit from private medical insurance compensation.

• Access co-working and gym/sports reimbursement.

• Utilize an education budget for professional development.

• Have the opportunity to earn rewards for innovative ideas that the company can patent.