Lead Security Engineer - Vulnerability Response (Imunify360)

📋 Description

• Design, build, and operate an end-to-end vulnerability response pipeline covering intake, triage
• Extend the existing AI-assisted vulnerability response pipeline from WordPress plugin protection to
• Write, review, and refine ModSecurity/SecLang rules to detect and mitigate real-world web
• Build automated test harnesses that evaluate rules against known exploits, representative traffic
• Use AI and LLM tools to accelerate vulnerability analysis and rule generation, implementing
• Lead and mentor security analysts, managing priorities, reviewing technical work, and supporting

🎯 Requirements

• At least 5 years of experience in web or application security, including vulnerability research
• Deep understanding of common web application attack classes: SQLi, XSS, RCE, authentication bypass
• Strong practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set (CRS)
• Proficiency with regular expressions and ability to translate attack patterns into accurate
• Ability to read and analyze PHP source code and understand vulnerabilities through advisories
• Strong Python programming skills, including building and maintaining production-grade automation

🎁 Benefits

• Fully remote work from Poland or other permitted locations worldwide, with flexible working hours.
• 24 days of paid vacation annually.
• 10 days of national holidays.
• Unlimited sick leave.
• Financial compensation toward private medical insurance.
• Support for coworking expenses.