Staff Security Engineer, Imunify360 (remote work)
CloudLinux21 hours ago
Remote, Spain +7 moreStaff+
Responsibilities
- Lead triage, root-cause analysis, and mitigation for large-scale malware and exploitation campaigns.
- Reverse-engineer malware and exploits targeting Linux servers and web applications.
- Own security incident response processes, severity models, runbooks, communications, escalation, and post-mortems.
- Coordinate vulnerability disclosure and responses with vendors, partners, CERTs/CSIRTs, abuse desks, and security vendors.
- Red-team products and infrastructure, threat-model high-risk changes, and drive identified issues through remediation.
- Build production detection, mitigation, telemetry, dynamic-analysis, honeypot, and threat-hunting tools, spending approximately 30–50% of time coding.
- Mentor analysts and engineers and participate as a bar-raiser in security hiring loops.
Requirements
- 10+ years of experience in security engineering, malware research, incident response, or offensive security, including several years leading cross-team work at Staff, Principal, or Lead scope.
- Deep hands-on malware analysis and reverse-engineering expertise.
- Strong web application security and practical exploitation experience.
- Deep Linux knowledge from both attacker and defender perspectives.
- Proven leadership of incident response for large-scale events, including advisories and post-mortems.
- Production Python coding experience plus a systems language such as Go, Rust, or C.
- Experience with coordinated vulnerability disclosure and collaboration with the security community.
- Strong concise written communication for technical and non-technical audiences and ability to work asynchronously across time zones.
- Daily use of AI tools for analysis and coding with critical evaluation of their output.
- Preferred qualifications include hosting or large web ecosystem experience, detection authoring at scale, kernel-level monitoring, rootkit detection, threat intelligence, ML for malware classification, public security research or disclosures, and relevant certifications.
Benefits
- Fully remote work with flexible working hours.
- 24 paid vacation days, 10 national holidays, and unlimited sick leave.
- Private medical insurance compensation.
- Co-working and gym/sports reimbursement.
- Education budget.
- Opportunity to receive a reward for innovative ideas that the company can patent.
About CloudLinux
CloudLinux builds a commercially supported Linux operating system and server-hardening tools for hosting providers and data centers running multi-tenant environments. It sells subscriptions and support that improve server stability, resource isolation, and security for shared hosting workloads, along with related maintenance and patching services. Founded in 2009 and headquartered in Estero, Florida, the company is privately held.