Senior / Principal Security Engineer (Node.js)

Company

CloudLinux is a global remote-first company providing Linux infrastructure and security products, including the Imunify360 Security Suite.

What you will do

• Define and build a new runtime protection product line for Node.js from the ground up.
• Develop the instrumentation strategy, deployment shape, and technical architecture.
• Implement detection logic and integrate it with large-scale threat intelligence feeds.
• Act as the PM, architect, and lead engineer for the product's lifecycle.
• Optimize performance based on runtime overhead, false positives, and false negatives.

Requirements

• Proficiency with the Node.js runtime and the JavaScript ecosystem.
• Strong web application security fundamentals and knowledge of practical exploitation.
• Experience designing detection rules that behave predictably at scale.
• Ability to drive a product end-to-end without needing detailed specifications.
• Must have already relocated from Russia or Belarus.

Nice to have

• Experience directing AI coding agents for high-quality output.
• Prior work on runtime-protection products, WAFs, or instrumentation tooling.
• Background in malware analysis or incident response.
• Familiarity with managed-hosting environments or published security research.

Culture & Benefits

• Fully remote work with flexible hours and a global-first culture.
• 24 days of paid vacation, 10 national holidays, and unlimited sick leave.
• Reimbursements for private medical insurance, co-working, and gym/sports.
• Dedicated budget for education and professional development.
• Rewards for innovative ideas that lead to company patents.