Lead Security Engineer - Vulnerability Response (Imunify360)

📋 Description

• Own the vulnerability response pipeline: Design, build, and operate an end-to-end workflow covering
• Expand automated WAF protection: Extend the existing AI-assisted vulnerability response pipeline
• Develop and maintain security rules: Write, review, and refine ModSecurity/SecLang rules to detect
• Validate protection before release: Build automated test harnesses that evaluate rules against
• Integrate AI into security workflows: Use AI and large language model (LLM) tools to accelerate
• Lead and mentor security analysts: Manage priorities, review technical work, support professional

🎯 Requirements

• At least 5 years of experience in web or application security, including vulnerability research
• Deep understanding of common web application attack classes, including SQL injection (SQLi)
• Strong practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set (CRS)
• Proficiency with regular expressions and the ability to translate observed attack patterns into
• Ability to read and analyze PHP source code and understand vulnerabilities through security
• Strong Python programming skills, including experience building and maintaining production-grade

🎁 Benefits

• Fully remote work: Work remotely from Poland or another permitted location worldwide, with flexible
• Paid vacation: 24 days of paid vacation annually.
• Public holidays: 10 days of national holidays.
• Sick leave: Unlimited sick leave.
• Healthcare support: Financial compensation toward private medical insurance.
• Coworking reimbursement: Support for coworking expenses.