SECURITY ENGINEER (NODE.JS)

Описание

CloudLinux is looking for an experienced researcher or engineer to build an end-to-end runtime protection layer for Node.js workloads on managed hosting. This role involves defining the product, technical approach, and implementation for a brand-new product line, focusing on defending web applications at runtime without customer cooperation.

Responsibilities

• Build the runtime protection layer end-to-end for Node.js workloads
• Define what to intercept, what not to, and the customer-visible surface of the product
• Determine the instrumentation strategy, deployment shape, and programming language
• Implement the solution using provided tooling like LLM subscriptions and modern dev infrastructure
• Build conviction in detection logic
• Plug into existing threat intelligence generated by the company's stack (tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds)
• Act as PM, architect, lead engineer, and QA for the product
• Direct AI coding agents to high-quality output

Requirements

• Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch
• Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration
• Strong web application security knowledge and current knowledge of practical exploitation
• A working sense of how detection rules behave at scale to catch attackers without flagging legitimate code
• Ability to ask for resources or help when needed, without waiting to be told what to do
• Comfort directing AI coding agents to high-quality output

Nice to have

• Prior work on runtime-protection products, application firewalls, or instrumentation tooling
• Background in malware analysis or incident response
• Familiarity with managed-hosting environments
• Public security research, vulnerability disclosures, or detection rulesets authored
• Familiarity with the Node.js runtime and the JavaScript ecosystem

We offer

• Focus on professional development
• Interesting and challenging projects
• Fully remote work with flexible working hours, allowing scheduling and work from any location worldwide
• Paid 24 days of vacation per year
• 10 days of national holidays
• Unlimited sick leaves
• Compensation for private medical insurance
• Co-working and gym/sports reimbursement
• Budget for education
• Opportunity to receive a reward for the most innovative idea that the company can patent