About The Position
CloudLinux is a global remote-first company focused on delivering high-volume, low-cost Linux infrastructure and security products. Imunify360 Security Suite is a product of CloudLinux Inc., offering a comprehensive security solution for shared and VPS/Dedicated servers. The company's mission is to protect web hosting providers and their hosted sites through a defense-in-depth stack. This role will focus on building a runtime protection layer for Node.js applications, specifically targeting AI-generated web apps deployed by non-technical owners. The goal is to defend these applications at runtime without requiring user cooperation or code changes. The engineer will own the product definition, technical approach, and end-to-end implementation, leveraging provided tooling and existing threat intelligence from CloudLinux's extensive infrastructure.
Requirements
- Familiarity with the Node.js runtime and the JavaScript ecosystem.
- Strong web application security fundamentals and current knowledge of practical exploitation.
- A working sense of how detection rules behave at scale, balancing attacker detection with flagging legitimate code.
- Ability to function as the Product Manager, Architect, Lead Engineer, and QA for the product.
- Proactive in asking for resources or help when needed.
Nice To Haves
- Comfort directing AI coding agents to high-quality output.
- Prior work on runtime-protection products, application firewalls, or instrumentation tooling.
- Background in malware analysis or incident response.
- Familiarity with managed-hosting environments.
- Public security research, vulnerability disclosures, or detection rulesets authored by the candidate.
Responsibilities
- Build and iterate on a brand-new product line for Node.js runtime protection.
- Define the product scope, including what to intercept, what not to intercept, and the customer-visible surface.
- Determine the technical approach, including instrumentation strategy, deployment shape, and programming language.
- Implement the runtime protection layer end-to-end.
- Develop methodologies for building conviction in detection logic.
- Integrate with existing cross-layer signals from CloudLinux's security stack (e.g., WAF, malware scanner, firewalls).
- Ensure the product meets key performance indicators: runtime overhead, false positives, false negatives, and customer-escalation volume.
- Drive the work and own the outcome of the product.
- Ship the product to real customer fleets and monitor telemetry.
Benefits
- Focus on professional development.
- Interesting and challenging projects.
- Fully remote work with flexible working hours.
- Ability to work from any location worldwide.
- 24 days of paid vacation per year.
- 10 days of national holidays.
- Unlimited sick leaves.
- Compensation for private medical insurance.
- Co-working and gym/sports reimbursement.
- Budget for education.
- Opportunity to receive a reward for the most innovative idea that the company can patent.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
