29 ott - Italia
Jobgether
pbThis position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Lead Security Engineer – Vulnerability Response (Imunify360) based in Italy. /b /p pWe are seeking a security engineering leader to build and own an AI-assisted vulnerability response pipeline that protects websites against critical threats before attackers can widely exploit them. In this role, you will combine deep web application security expertise with automation, threat analysis, and practical product thinking to accelerate vulnerability detection, validation, and protection. You will extend existing WordPress security automation to ModSecurity and Coraza Web Application Firewall (WAF) rules, ensuring new defenses are accurate, tested, and production-ready. You will also lead a small team of security analysts and collaborate with automation, QA, and marketing to streamline the journey from vulnerability disclosure to protection and public advisory. Success will be measured by faster time-to-protection, broader coverage of critical vulnerabilities, and consistently low false-positive rates. This is an opportunity to shape an AI-driven security capability in a remote-first environment where technical ownership, rapid response, and customer protection are paramount. /p h3Accountabilities /h3 ul lipbOwn the vulnerability response pipeline: /b Design, build, and operate an end-to-end workflow covering vulnerability intake, triage, analysis, AI-assisted rule generation, testing, release, and public disclosure. /p /li lipbExpand automated WAF protection: /b Extend the existing AI-assisted vulnerability response pipeline from WordPress plugin protection to ModSecurity and Coraza WAF rules. /p /li lipbDevelop and maintain security rules: /b Write, review, and refine ModSecurity/SecLang rules to detect and mitigate real-world web application vulnerabilities and attack patterns. /p /li lipbValidate protection before release: /b Build automated test harnesses that evaluate rules against known exploits, representative traffic, and legitimate requests to minimize false positives and avoid disrupting customer websites. /p /li lipbIntegrate AI into security workflows: /b Use AI and large language model (LLM) tools to accelerate vulnerability analysis and rule generation, while implementing validation processes to ensure the accuracy and reliability of generated outputs. /p /li lipbLead and mentor security analysts: /b Manage priorities, review technical work, support professional development, and remove blockers to help the team deliver effective protection quickly. /p /li lipbMeasure and improve outcomes: /b Define, monitor, and continuously improve key performance indicators, including time-to-protection, critical vulnerability coverage, and false-positive rates. /p /li lipbAutomate security advisories: /b Integrate public advisory generation into the vulnerability response pipeline and collaborate with marketing to establish appropriate formats, review processes, and publication workflows. /p /li lipbAnalyze vulnerabilities and exploits: /b Interpret vulnerability disclosures, advisories, and source code changes to understand exploit mechanisms and translate findings into effective defensive rules. /p /li lipbBalance speed and precision: /b Make informed decisions under time pressure while ensuring that new security controls protect customers without blocking legitimate traffic. /p /li lipbDrive continuous improvement: /b Identify bottlenecks across the response process, improve automation and testing, and ensure the pipeline evolves with emerging threats and customer needs. /p /li /ul h3Requirements /h3 ul lipAt least b5 years of experience in web or application security /b, including vulnerability research, detection engineering, WAF engineering, or a closely related field. /p /li lipDeep understanding of common web application attack classes, including SQL injection (SQLi), cross-site scripting (XSS), remote code execution (RCE), authentication bypass, path traversal, file upload vulnerabilities, and insecure deserialization. /p /li lipStrong practical experience writing WAF rules using ModSecurity/SecLang, OWASP Core Rule Set (CRS), or comparable technologies. /p /li lipProficiency with regular expressions and the ability to translate observed attack patterns into accurate, effective detection rules. /p /li lipAbility to read and analyze PHP source code and understand vulnerabilities through security advisories, patches, and code diffs. /p /li lipStrong Python programming skills, including experience building and maintaining production-grade automation pipelines. /p /li lipExperience with CI/CD workflows, automated testing, and integrating validation into software delivery processes. /p /li lipRegular hands-on use of AI and LLM tools, with sound judgment about their limitations and the ability to independently verify generated analysis and code. /p /li lipDemonstrated ability to lead a technical project end to end, from defining the objective and designing the solution through implementation, deployment, and performance measurement. /p /li lipA product-oriented mindset, with the ability to evaluate technical decisions in terms of customer impact, operational risk, and measurable outcomes. /p /li lipStrong ownership and problem-solving skills, including the ability to identify process bottlenecks and address underlying causes rather than isolated symptoms. /p /li lipClear communication skills, with the ability to explain technical issues, raise risks early, and collaborate effectively with cross-functional teams. /p /li lipAbility to remain calm and make sound decisions under pressure, including when responding to critical vulnerabilities and incomplete information. /p /li lipbEnglish proficiency at upper-intermediate level or higher. /b /p /li /ul pbNice-to-have qualifications: /b /p ul lipExperience with WordPress ecosystem security, including plugin vulnerabilities and vulnerability intelligence sources such as Wordfence, Patchstack, or WPScan. /p /li lipExperience with CVE attribution, vulnerability disclosure processes, or bug bounty programs. /p /li lipFamiliarity with Coraza or other Web Application Firewall engines. /p /li lipBackground in exploit analysis, threat intelligence, or security research. /p /li lipExperience with Linux server administration or the web hosting industry. /p /li /ul h3Benefits /h3 ul lipbFully remote work: /b Work remotely from Poland or another permitted location worldwide, with flexible working hours and the freedom to organize your schedule. /p /li lipbPaid vacation: /b 24 days of paid vacation annually. /p /li lipbPublic holidays: /b 10 days of national holidays. /p /li lipbSick leave: /b Unlimited sick leave. /p /li lipbHealthcare support: /b Financial compensation toward private medical insurance. /p /li lipbCoworking reimbursement: /b Support for coworking expenses. /p /li lipbSports and wellness: /b Reimbursement for gym memberships or other sports-related expenses. /p /li lipbProfessional development: /b Dedicated education budget to support ongoing learning and skill development. /p /li lipbInnovative contributions: /b Opportunity to receive a reward for an innovative idea that the company can patent. /p /li lipbTechnical challenges: /b Work on complex security problems involving AI-assisted automation, vulnerability research, and real-world web protection. /p /li lipbLeadership opportunities: /b Lead and mentor security analysts while influencing the strategy and performance of a critical security response capability. /p /li lipbFlexible, remote-first culture: /b Join an environment that emphasizes ownership, professional growth, and effective collaboration across distributed teams. /p /li lipbSalary and compensation: /b The salary range, premio structure, and other financial compensation details are not specified in the provided job description and should be confirmed during the hiring process. /p /li /ul pbHow Jobgether works: /b /p pWe use an bAI-powered matching process /b to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. /p pWe appreciate your interest and wish you the best! /p pbData Privacy Notice: /b By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. /p #J-18808-Ljbffr
29 ott - Stezzano
Nessun nome
29 ott - Bari
Società riconosciuta
29 ott - Bari
Società riconosciuta
29 ott - L'Aquila
Gruppo importante