Lead Security Engineer - Vulnerability Response (Imunify360)
New
J
JobgetherWeb application security
MexicoFull-TimeLead
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- English proficiency at upper-intermediate level or higher.
- Experience
- At least 5 years of experience in web or application security
- Required Skills
- PHPPythonCI/CD
Requirements
- At least 5 years of experience in web or application security, including vulnerability research, detection engineering, WAF engineering, or a closely related field.
- Deep understanding of web application attack classes including SQL injection, cross-site scripting, remote code execution, authentication bypass, path traversal, file upload vulnerabilities, and insecure deserialization.
- Practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set, or comparable technologies.
- Proficiency with regular expressions and translating observed attack patterns into detection rules.
- Ability to read and analyze PHP source code and understand vulnerabilities through advisories, patches, and code diffs.
- Strong Python programming skills, including experience building and maintaining production-grade automation pipelines.
- Experience with CI/CD workflows, automated testing, and integrating validation into software delivery processes.
- Regular hands-on use of AI and LLM tools, with the ability to independently verify generated analysis and code.
- Demonstrated ability to lead a technical project end to end, from defining objectives and designing solutions through implementation, deployment, and performance measurement.
- Upper-intermediate English proficiency or higher.
- Nice to have: WordPress ecosystem security experience, including plugin vulnerabilities and sources such as Wordfence, Patchstack, or WPScan.
- Nice to have: Experience with CVE attribution, vulnerability disclosure processes, or bug bounty programs.
- Nice to have: Familiarity with Coraza or other Web Application Firewall engines.
- Nice to have: Background in exploit analysis, threat intelligence, or security research.
- Nice to have: Linux server administration or web hosting industry experience.
Responsibilities
- Design, build, and operate the end-to-end vulnerability response workflow, from intake and triage through testing, release, and public disclosure.
- Extend AI-assisted vulnerability protection from WordPress plugins to ModSecurity and Coraza WAF rules.
- Write, review, and refine ModSecurity/SecLang rules to detect and mitigate web application vulnerabilities and attack patterns.
- Build automated test harnesses to validate rules against known exploits, representative traffic, and legitimate requests.
- Use AI and large language model tools to accelerate vulnerability analysis and rule generation, validating generated outputs for accuracy and reliability.
- Lead and mentor security analysts by managing priorities, reviewing technical work, supporting development, and removing blockers.
- Define, monitor, and improve measures including time-to-protection, critical vulnerability coverage, and false-positive rates.
- Integrate public advisory generation into the response pipeline and collaborate with marketing on review and publication workflows.
- Analyze vulnerability disclosures, advisories, source code changes, and exploit mechanisms to develop defensive rules.
- Identify process bottlenecks and improve automation and testing as threats and customer needs evolve.
View Full Description & ApplyYou'll be redirected to the employer's site
