[Hiring] Lead Security Engineer - Vulnerability Response @Cloudlinux

Role Description

We are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team.

The challenge ahead:

• AI-driven vulnerability response: Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window.
• Protection plus public announcement, both automated: The same pipeline that ships the rule also produces the public advisory.
• Build on what works: Extend the AI-assisted pipeline for ModSecurity/Coraza WAF rules.
• Speed without breaking sites: Ensure rules do not block legitimate traffic on shared hosting.
• Make it measurable: Own metrics such as time-to-protection, coverage of critical vulnerabilities, and false-positive rate.

About the role:

• Own the vulnerability response pipeline end to end and be its main builder.
• Combine deep web application security expertise with strong automation skills.
• Lead a small team of security analysts and work closely with automation, QA, and marketing.

What you'll do:

• Design and build the AI-driven pipeline from disclosure to announcement.
• Lead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules.
• Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities.
• Build test harnesses that check rules against exploits and real traffic before release.
• Lead and mentor security analysts: set priorities, review their work, remove blockers.
• Define and track time-to-protection, coverage, and false-positive rate, and improve them.
• Automate advisory generation as part of the pipeline.

Qualifications

• 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar.
• Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic.
• Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions.
• Able to read PHP code and understand a vulnerability from an advisory or a patch diff.
• Strong Python: experience building automation pipelines that run in production.
• Hands-on daily use of AI/LLM tools; know where to trust them and how to verify their output.
• Proven track record of leading a technical project end to end.
• Product mindset: reason about customer impact, not only technical correctness.
• Upper-intermediate English or better.

Requirements

• WordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty.
• Coraza or other WAF engines.
• Exploit analysis or threat intelligence background.
• Linux server administration, hosting industry.

Personal skills

• Strong ownership: take a goal, not a task list.
• See the whole process and find the bottleneck, not only fix individual issues.
• Communicate clearly and raise risks early.
• Calm under pressure: critical vulnerabilities don't wait for working hours.
• Comfortable making decisions with incomplete information.

Benefits

• A focus on professional development.
• Interesting and challenging projects.
• Fully remote work with flexible working hours.
• Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.
• Compensation for private medical insurance.
• Co-working and gym/sports reimbursement.
• Budget for education.
• Opportunity to receive a reward for the most innovative idea that the company can patent.