CloudLinux is a general remote-first company.
We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations.
Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information: We are currently hiring a Staff Security Engineer within the Imunify360 product.
Imunify360 is CloudLinux's security suite for Linux web servers.
It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early — often in the first hours.
Check out our website for more information: Role Mission own the security review gate for high-risk changes.
Turn findings into fixes with the owning teams, not just reports.
Detection engineering and tooling Raise the quality bar of detections: false-positive budgets, test corpora, staged rollout with measurement gates and fast rollback.
Build and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage where it measurably helps.
Write production code for these tools; expect *% of your time to be hands-on building.
Turn telemetry into intelligence: emerging exploits, attacker infrastructure, trends — shared as internal briefs and selected public research.
People multiplier (no direct reports) Mentor analysts and engineers; raise the security skill level across teams.
Bar-raiser in security hiring loops.
Key Milestones 30 days: Analyzed real threats end-to-end.




Mapped the current response flow and where it breaks.
Shipped at least one detection or mitigation to production.
90 days: Security response process and severity model published and agreed.
Led at least one real campaign response with a written post-mortem.
Baseline response metrics in place.
6 months: Time from first sighting to protection measurably reduced vs. baseline.
First red-team review completed, top findings fixed.
Working relationships with key external partners.
12 months: Recognized internally and externally as the owner of security response.
Public research or disclosures published.
Teams can run a standard campaign response without you.
Requirements Must have 10+ years in security engineering, malware research, incident response, or offensive security, with several years leading cross-team work at Staff/Principal/Lead scope.
Deep hands-on malware analysis and reverse engineering skills.
Strong web application security and practical exploitation experience.
Deep Linux knowledge from both the attacker's and the defender's side.
Proven incident response leadership on large-scale events: you have run the response, written the advisory, and closed the post-mortem.
Production coding in Python plus a systems language (Go, Rust or C).




Experience with coordinated vulnerability disclosure and working with the security community.
Clear, short writing for both engineers and non-technical stakeholders; works well async across time zones.
Daily user of AI tools for analysis and coding, with critical judgment about their output.
Nice to have Background in hosting or large web ecosystems.
Detection authoring at scale (signatures, WAF/IDS rules).
Kernel-level monitoring and rootkit detection.
Threat intelligence practice and actor tracking.
ML for malware classification.
Public track record: CVEs, published research, talks, CTFs, open-source security tools.
Relevant certifications are a plus, not a requirement.
Benefits What's in it for you?
Stay hands-on technically while owning complex, high-impact engineering work.
Work on challenging Linux, automation, and cybersecurity problems across mature and newer products.
Influence technical direction and make meaningful architectural decisions.
Work independently with a high level of ownership and autonomy.
Fully remote work with flexible working hours.
24 paid vacation days, 10 national holidays, and unlimited sick leave.
Private medical insurance compensation.
Co-working and gym/sports reimbursement.
Education budget.
Opportunity to receive a reward for innovative ideas that the company can patent.
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (), which provides detailed information on how we maintain and handle your data.

📌 Staff Security Engineer, Imunify360 (España)
🏢 CloudLinux
📍 España