Lead Security Engineer - Vulnerability Response (Imunify360)

We are seeking a security engineering leader to build and own an AI-assisted vulnerability response pipeline that protects websites against critical threats before attackers can widely exploit them. In this role, you will combine deep web application security expertise with automation, threat analysis, and practical product thinking to accelerate vulnerability detection, validation, and protection. You will extend existing WordPress security automation to ModSecurity and Coraza Web Application Firewall (WAF) rules, ensuring new defenses are accurate, tested, and production-ready. You will also lead a small team of security analysts and collaborate with automation, QA, and marketing to streamline the journey from vulnerability disclosure to protection and public advisory. Success will be measured by faster time-to-protection, broader coverage of critical vulnerabilities, and consistently low false-positive rates. This is an opportunity to shape an AI-driven security capability in a remote-first environment where technical ownership, rapid response, and customer protection are paramount.

• Experience with WordPress ecosystem security, including plugin vulnerabilities and vulnerability intelligence sources such as Wordfence, Patchstack, or WPScan.

• Experience with CVE attribution, vulnerability disclosure processes, or bug bounty programs.

• Familiarity with Coraza or other Web Application Firewall engines.

• Background in exploit analysis, threat intelligence, or security research.

• Experience with Linux server administration or the web hosting industry.