Security Engineer - Node.js Proactive Defense (remote work)
CloudLinux2 months ago
Remote, EMEA +6 moreSenior
Responsibilities
- Define the product scope, interception strategy, deployment shape, customer-facing surface, and technical approach for a new Node.js runtime protection product.
- Research, architect, implement, release, and iterate on the product end to end.
- Develop detection logic that distinguishes malicious, vulnerable, and legitimate application behavior across diverse frameworks, libraries, and customer code.
- Use CloudLinux threat intelligence, malware samples, domain and URL reputation, and IP attack feeds to improve runtime detection.
- Monitor runtime overhead, false positives, false negatives, customer escalations, and production telemetry.
- Act as the initial product manager, architect, lead engineer, and QA owner while requesting additional resources as needed.
Requirements
- Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch.
- Strong end-to-end technical ownership from investigation and architecture through implementation, release, and production iteration.
- Strong web application security knowledge and current practical exploitation knowledge.
- Working knowledge of detection rules at scale, including balancing attack detection with false positives in legitimate code.
- Ability to independently drive product, architecture, engineering, and QA responsibilities.
- Comfort directing AI coding agents to produce high-quality output.
- Preferred experience with runtime protection products, application firewalls, instrumentation tooling, malware analysis, incident response, managed-hosting environments, public security research, vulnerability disclosures, detection rulesets, or the Node.js and JavaScript ecosystem.
Benefits
- Fully remote work with flexible hours and the ability to work from anywhere worldwide.
- 24 paid vacation days per year, 10 national holidays, and unlimited sick leave.
- Private medical insurance compensation.
- Co-working and gym or sports reimbursement.
- Education budget.
- Professional development opportunities and challenging projects.
- Opportunity to receive a reward for the most innovative idea the company can patent.
Tech Stack
Categories
About CloudLinux
CloudLinux builds a commercially supported Linux operating system and server-hardening tools for hosting providers and data centers running multi-tenant environments. It sells subscriptions and support that improve server stability, resource isolation, and security for shared hosting workloads, along with related maintenance and patching services. Founded in 2009 and headquartered in Estero, Florida, the company is privately held.