Lead Security Engineer - Vulnerability Response (Imunify360)

📋 Description

• Own the vulnerability response pipeline: Design, build, and operate an end-to-end workflow covering
• Expand automated WAF protection: Extend the existing AI-assisted vulnerability response pipeline to
• Develop and maintain security rules: Write, review, and refine ModSecurity/SecLang rules to detect
• Validate protection before release: Build automated test harnesses that evaluate rules against
• Integrate AI into security workflows: Use AI and LLM tools to accelerate vulnerability analysis and
• Lead and mentor security analysts: Manage priorities, review technical work, support professional

🎯 Requirements

• At least 5 years of experience in web or application security, including vulnerability research
• Deep understanding of web application attack classes: SQL injection, XSS, RCE, authentication
• Strong practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set (CRS)
• Proficiency with regular expressions and translating attack patterns into detection rules.
• Ability to read and analyze PHP source code and understand vulnerabilities through advisories
• Strong Python programming skills, including production-grade automation pipelines.

🎁 Benefits

• Fully remote work with flexible hours
• 24 days of paid vacation annually
• 10 days of national holidays
• Unlimited sick leave
• Financial compensation toward private medical insurance
• Coworking reimbursement