Lead Security Engineer - Vulnerability Response (Imunify360)

📋 Description

• Design, build, and operate an end-to-end vulnerability response pipeline covering vulnerability
• Extend the existing AI-assisted vulnerability response pipeline from WordPress plugin protection to
• Write, review, and refine ModSecurity/SecLang rules to detect and mitigate real-world web
• Build automated test harnesses that evaluate rules against known exploits, representative traffic
• Use AI and large language model (LLM) tools to accelerate vulnerability analysis and rule
• Manage priorities, review technical work, support professional development, and remove blockers to

🎯 Requirements

• At least 5 years of experience in web or application security, including vulnerability research
• Deep understanding of common web application attack classes, including SQL injection (SQLi)
• Strong practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set (CRS)
• Proficiency with regular expressions and the ability to translate observed attack patterns into
• Ability to read and analyze PHP source code and understand vulnerabilities through security
• Strong Python programming skills, including experience building and maintaining production-grade

🎁 Benefits

• Fully remote work: Work remotely from Poland or another permitted location worldwide, with flexible
• Paid vacation: 24 days of paid vacation annually.
• Public holidays: 10 days of national holidays.
• Sick leave: Unlimited sick leave.
• Healthcare support: Financial compensation toward private medical insurance.
• Coworking reimbursement: Support for coworking expenses.