Lead Security Engineer - Vulnerability Response (Imunify360)

About the role

A partner company is recruiting a Lead Security Engineer for a remote, first-positioned role in Switzerland. The engineer builds and owns an AI-assisted vulnerability response pipeline that protects websites against critical threats before they are widely exploited. The role combines web application security expertise with automation, threat analysis and product thinking, extending existing WordPress security automation to ModSecurity and Coraza WAF rules, and leading a small team of security analysts.

Key responsibilities

• Own the vulnerability response pipeline: design, build and operate the workflow from intake and triage to analysis, AI-assisted rule generation, testing, release and public disclosure.
• Expand automated WAF protection from WordPress plugin protection to ModSecurity and Coraza WAF rules.
• Write, review and refine ModSecurity/SecLang rules, and build automated test harnesses to validate rules against known exploits and legitimate traffic.
• Use AI and LLM tools to accelerate analysis and rule generation, with validation to ensure accuracy.
• Lead and mentor security analysts, and define and improve KPIs such as time-to-protection, coverage and false-positive rates.
• Integrate public advisory generation into the pipeline and work with marketing on formats and publication workflows.

Required profile

• At least 5 years of experience in web or application security, including vulnerability research, detection engineering, WAF engineering or a closely related field.
• Demonstrated ability to lead a technical project end to end and a product-oriented mindset focused on customer impact and measurable outcomes.
• Clear communication skills and the ability to stay calm under pressure; English at upper-intermediate level or higher.

Required skills

• Deep knowledge of common web attacks (SQL injection, XSS, RCE, authentication bypass, path traversal, file upload, insecure deserialization).
• Strong practical experience writing WAF rules with ModSecurity/SecLang, OWASP CRS or similar, and regular expressions.
• Ability to read PHP code and analyse vulnerabilities through advisories and patches.
• Strong Python, CI/CD, automated testing and hands-on use of AI/LLM tools.
• Nice to have: WordPress security, CVE attribution, Coraza, exploit analysis, Linux server administration.

What we offer

• Fully remote work with flexible hours.
• 24 days of paid vacation, 10 national holidays and unlimited sick leave.
• Healthcare support, coworking and sports/wellness reimbursements, and a professional development budget.
• Opportunity to earn a reward for an innovative, patentable idea.