CloudLinux is a global remote?first company driven by our principles: do the right thing, employees first, we are remote first, and we deliver high?cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Imunify360 Security SuiteImunify360 is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. layer approach to security delivers comprehensive and complete attack prevention.
Check out our website for more information about our Imunify360 Product: are building an engineering?heavy security platform for protecting WordPress and its plugin ecosystem. We are looking for a Senior Security Engineer who understands exploitation deeply but prefers building tooling and automation over one?Automatically generate and validate exploit PoCs for known WordPress / PHP CVEsAnalyze PHP execution traces from real zero?day attacks against WordPress installationsLLMs are a first?This is an engineering role with offensive depth, not a traditional pentesting or red?What You'll BuildSystems to ingest, normalize, and analyze PHP execution traces:Function calls, parameters, control flow,



side effectsNo native binary reversing—focus is PHP?Convert CVE descriptions + PHP source code into working PoCsReplay inferred exploit paths deterministicallyLLM?specific endpointsInfrastructure that transforms exploit mechanics into signals usable by detection and prevention systemsRequirementsMust HaveStrong background in security engineering or offensive security automationHands?on experience exploiting WordPress plugins, themes, or PHP applicationsDeep understanding of:PHP execution model and request lifecycleWordPress internals (nonces, hooks, REST, admin flows) semantics, sessions, cookies, and authorizationProven ability to read, reason about, and exploit PHP source codeStrong Python engineering skills for building:level call graphsFuzzing or vulnerability discovery pipelinesFamiliarity with tools like WPScan, Nuclei, Metasploit, BurpContributions to exploit tooling, frameworks, or security automationPublic CVEs or PoCs (helpful but not required)What This Role Is Not? Manual pentesting or report?off demosLLMs are used pragmatically, as part of production pipelinesYour work directly shapes how real WordPress attacks are detected and stoppedHigh autonomy, deep technical ownershipBenefitsWhat's in it for you? A focus on professional developmentInteresting and challenging projectsFully remote work with adaptable

working hours
, that allows you to schedule your day and work from any location worldwidePaid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leavesCompensation for private medical insuranceCo?working and gym/sports reimbursementBudget for educationThe opportunity to receive a reward for the most innovative idea that the company can patentBy applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (), which provides detailed information on how we maintain and handle your data. #

📌 Senior Security Engineer(Hybrid) (Sevilla)
🏢 CloudLinux
📍 Sevilla