Security Engineer

📋 Job Overview

CloudLinux is a global remote-first company driven by principles of doing the right thing, prioritizing employees, and delivering high-volume, low-cost Linux infrastructure and security products. We are seeking a Security Engineer to build a brand-new product line focused on runtime protection for Node.js applications.

🏢 About CloudLinux

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information https://cloudlinux.com/

🎯 The Role

Imunify360 Security Suite is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention.

The mission is to protect web hosting providers and the sites running on their infrastructure through a defense-in-depth stack: web-server-layer WAF, runtime application self-protection for PHP, deep application integrations (WordPress plugins and similar), a malware scanner with cleanup capability, and network-layer firewalls and IP reputation. The pieces talk to each other, and the threat intelligence they generate at scale powers detection across the stack.

Node.js is the segment of the hosting market growing fastest, and the next layer we want to build for it is runtime protection inside the Node.js process itself. Most Node.js workloads on managed hosting today are AI-generated web apps deployed by non-technical owners who can't, won't, and shouldn't be expected to patch their own code or audit their own dependencies. We're going to defend those apps anyway — at runtime, without their cooperation, without breaking them.

You'll build that runtime protection layer end-to-end.

✅ Key Responsibilities

• You'll own the product. A brand-new product line, yours to define — what we intercept, what we don't, what the customer-visible surface looks like.
• You'll own the technical approach. Instrumentation strategy, deployment shape, programming language — all open. You'll consult with our architects but the direction is yours.
• You'll handle implementation, end to end. You'll have the full tooling stack we provide — LLM subscriptions, modern dev infrastructure, the works. Use what makes you fast.
• You'll determine the methodology. How you build conviction in your detection logic — your call.
• You'll manage cross-layer signal. Our existing stack produces threat intelligence at unmatched scale: tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds. These are available for you to plug into. Use what helps.

📌 Required Qualifications

• Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch.
• Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration.
• Strong web application security knowledge and current knowledge of practical exploitation.
• A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code.
• Ability to start as the PM, architect, lead engineer, and QA for this product. You ask for resources or help when you need them; you don't wait to be told what to do.
• Comfort directing AI coding agents to high-quality output.

⭐ Desirable Experience

• Prior work on runtime-protection products, application firewalls, or instrumentation tooling.
• Background in malware analysis or incident response.
• Familiarity with managed-hosting environments.
• Public security research, vulnerability disclosures, or detection rulesets you've authored.
• Familiarity with the Node.js runtime and the JavaScript ecosystem.

🎁 Benefits

A focus on professional development.
Interesting and challenging projects.
Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide.
Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.
Compensation for private medical insurance.
Co-working and gym/sports reimbursement.

🛂 Visa & Eligibility

No visa sponsorship or specific eligibility requirements mentioned.