Staff Security Engineer (Cybersecurity)

Location: Remote; listed locations are Lisbon, Portugal; Warsaw, Poland; Madrid, Spain; and Prague, Czechia. Flexible working hours.

Company

hirify.global is a global remote-first company developing Linux infrastructure and security products, including the Imunify360 security suite for Linux web servers.

What you will do

• Lead responses to large-scale exploitation and malware campaigns, including triage, root-cause analysis, mitigation, cleanup measurement, and post-incident review.
• Reverse-engineer malware and exploits targeting Linux servers and web applications; track campaigns, indicators, actors, and toolkits.
• Own the security incident response process, vulnerability triage, severity model, runbooks, communications, escalation, and responsible disclosure coordination.
• Red-team Imunify360 products and infrastructure, threat-model high-risk changes, and drive findings through to fixes.
• Build detection, dynamic-analysis, honeypot, telemetry, and ML-assisted triage tooling, writing production code for approximately 30–50% of the role.
• Mentor analysts and engineers, contribute to security hiring loops, and communicate findings to technical and non-technical stakeholders.

Requirements

• 10+ years in security engineering, malware research, incident response, or offensive security, including several years leading cross-team work at Staff, Principal, or Lead scope.
• Deep hands-on malware analysis and reverse engineering skills.
• Strong web application security and practical exploitation experience.
• Deep Linux knowledge from both attacker and defender perspectives.
• Proven incident response leadership on large-scale events, including running the response, writing advisories, and closing post-mortems.
• Production coding in Python plus a systems language: Go, Rust, or C.
• Experience with coordinated vulnerability disclosure and work with the security community.
• Clear, concise writing for engineers and non-technical stakeholders; ability to work asynchronously across time zones.
• Daily use of AI tools for analysis and coding, with critical judgment of their output.

Nice to have

• Experience in hosting or large web ecosystems.
• Detection authoring at scale, including signatures and WAF/IDS rules.
• Kernel-level monitoring and rootkit detection.
• Threat intelligence practice and actor tracking.
• ML for malware classification.
• Public track record such as CVEs, published research, talks, CTFs, or open-source security tools.
• Relevant certifications.

Culture & Benefits

• Fully remote work with flexible working hours and a high level of autonomy.
• Hands-on technical ownership of complex Linux, automation, and cybersecurity work.
• 24 paid vacation days, 10 national holidays, and unlimited sick leave.
• Private medical insurance compensation, co-working reimbursement, and gym or sports reimbursement.
• Education budget and the opportunity to receive a reward for innovative patentable ideas.