Staff Security Engineer, Imunify360 (Remote)

About the role

CloudLinux, a remote-first company, is hiring a Staff Security Engineer for its Imunify360 product, a security suite for Linux web servers that protects hundreds of thousands of hosting servers. This is a hands-on technical leadership role focused on security engineering rather than SOC monitoring, compliance or pure research. As an individual contributor, there are no direct reports.

Key responsibilities

• Lead response to large-scale malware and exploitation campaigns: triage, root cause and mitigation across all product layers, and track campaigns over time
• Reverse-engineer malware and exploits targeting Linux servers and web applications
• Own the security incident and response process, including severity models, runbooks, communication and escalation, and coordinate with vendors, CERTs/CSIRTs and abuse desks
• Triage external vulnerability reports and act as the technical voice in security advisories and partner briefings
• Red-team the product and infrastructure, threat-model new features and own the security review gate for high-risk changes
• Improve detections: define false-positive budgets, test corpora and staged rollouts, and build and automate an analysis pipeline with dynamic analysis, honeypots, telemetry-driven hunting and ML-assisted triage
• Write production code for these tools (about 30-50% of time spent hands-on), turn telemetry into intelligence and share findings internally and publicly
• Mentor analysts and engineers and act as a bar-raiser in security hiring

Required profile

• 10+ years in security engineering, malware research, incident response or offensive security, with several years leading cross-team work at Staff/Principal/Lead scope
• Proven incident response leadership on large-scale events, including running the response, writing the advisory and closing the post-mortem
• Clear, short writing for engineers and non-technical stakeholders, and comfort working asynchronously across time zones
• Daily use of AI tools for analysis and coding, with critical judgment about their output

Required skills

• Deep hands-on malware analysis and reverse engineering
• Strong web application security and practical exploitation experience
• Deep Linux knowledge from both attacker and defender perspectives
• Production coding in Python plus a systems language (Go, Rust or C)
• Experience with coordinated vulnerability disclosure and the security community
• Nice to have: detection authoring at scale, kernel-level monitoring and rootkit detection, threat intelligence practice, ML for malware classification, and a public track record of CVEs, research, talks, CTFs or open-source tools

What we offer

• Fully remote work with flexible hours
• 24 paid vacation days, 10 national holidays and unlimited sick leave
• Private medical insurance compensation, co-working and gym/sports reimbursement, education budget
• Opportunity to receive a reward for innovative ideas that the company can patent