Lead Security Engineer - Vulnerability Response (Imunify360)
Core
Build and run an AI-driven pipeline to detect critical web vulnerabilities, generate and validate WAF rules, and ship them to production before attackers exploit them.
Role type
Lead Security Engineer (Vulnerability Response & Automation)
Builds
Automated vulnerability response pipeline, WAF rules (ModSecurity/Coraza), and public security advisories
Domain
Web Application Security, Cloud Infrastructure, AI/LLM
Deliverable
production ML models
Required skills
Web application security, WAF rule engineering (ModSecurity/SecLang), Python automation, AI/LLM tool usage, vulnerability research, PHP code reading, CI/CD pipelines
Preferred skills
WordPress ecosystem security, Coraza, exploit analysis, threat intelligence, Linux server administration
Technologies
ModSecurity, SecLang, OWASP CRS, Python, AI/LLM tools, CI/CD
Responsibilities
Design and build the AI-driven vulnerability response pipeline; Lead extension of WordPress plugin pipeline to ModSecurity/Coraza; Write and review WAF rules; Build test harnesses for rule validation; Lead and mentor security analysts; Define and track security metrics (time-to-protection, false-positive rate)
Seniority
Senior, hands-on IC with team leadership
