Security Developer/Researcher

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.

We are looking for a talented Security Developer/Researcher to join our Imunify team! 

Imunify Security is an innovative security solution, powered by Artificial Intelligence for Linux web servers. It is designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use security solution with the six-layer approach to security delivers comprehensive and complete attack prevention.

More details can be found on the product website Imunify360.com, and about the company on CloudLinux.com

As our Security Developer/Researcher, you’ll be joining a dedicated research team responsible for delivering security patches—an essential part of our service. You’ll play a critical role in analyzing vulnerabilities and threats, backporting patches, and expanding coverage for supported applications and plugins.

You will be responsible for:

• Analyzing new security vulnerabilities in open-source PHP and JavaScript applications and frameworks (e.g., WordPress, Angular, Node.js, Drupal). Focus on JavaScript.
• Backporting upstream patches to fix vulnerabilities in earlier versions.
• Designing, building, and deploying new features for our internal tooling to automate workflows.
• Researching new trends in exploitation techniques and malware approaches and developing mitigation strategies.
• Increasing the coverage of supported PHP and JS applications and plugins.

Your work will directly impact the safety and credibility of millions of developers worldwide. That’s why we value attention to detail and a high standard of quality in everything you do.

To be successful, you should have:

• Good knowledge of JavaScript and PHP, or with one of them.
• Experience with a scripting language such as Python.
• 3+ years of relevant experience as a Software Engineer in Test, Security Researcher, or a similar role.
• The candidate should be security-oriented, working on vulnerability research in JavaScript and PHP applications.
• Familiarity with Docker and Docker Compose. You should be able to spin up multiple containers, replicate web environments, and test across different PHP versions.
• Upper-intermediate or higher level of English.

Nice to have:

• Understanding and knowledge of the security vulnerabilities life cycle is a plus.
• Good Linux knowledge.

What's in it for you?

• A focus on professional development.
• Interesting and challenging projects.
• Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide.
• Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.
• Compensation for private medical insurance.
• Co-working and gym/sports reimbursement.
• Budget for education.
• The opportunity to receive a reward for the most innovative idea that the company can patent.

By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://cloudlinux.com/candidate-privacy-notice), which provides detailed information on how we maintain and handle your data.