Security Engineer / Staff Engineer

About the role

We are looking for a senior‑level Security Engineer / Staff Engineer to design and launch a brand‑new runtime protection layer for Node.js applications. The role is independent – you will own the architecture, implementation and first production release of the product for Imunify360, a leading Linux security suite.

Key responsibilities

• Define the technical approach for embedding runtime protection inside the Node.js process.
• Design detection logic that identifies and blocks attacks in real time without modifying client code.
• Build, test and ship the first version of the product in live production environments.
• Monitor telemetry, gather feedback and continuously improve the solution to meet targets for overhead, false positives, false negatives and escalation volume.
• Make key architectural decisions and ensure the solution scales across thousands of hosted servers.

Required profile

• Strong background in security engineering or security research with deep knowledge of attack vectors and defense mechanisms.
• Proven experience building and shipping a product from concept to production with end‑to‑end ownership.
• Ability to work autonomously on ambiguous problems and deliver results without constant supervision.
• Experience designing architecture at a senior or staff level is a strong plus.
• Intermediate or higher English communication skills (written and spoken).

Required skills

• Security engineering
• Security research
• Node.js runtime protection
• Linux
• WAF instrumentation
• AI coding agents
• Malware analysis
• Incident response