Software Engineer for Imunify360 Linux security

CloudLinux develops high-volume, low-cost Linux infrastructure and security products that help companies improve operational efficiency. Imunify360 is its multi-layer security suite for Linux web servers, providing antivirus and malware cleanup, WAF, IDS/IPS, proactive defense, patch management, and IP/domain reputation services. It runs on hundreds of thousands of shared, VPS, and dedicated hosting servers.

• Own Imunify360’s end-to-end product architecture, including agents, servers, cloud backends, data flows, and contracts
• Write and drive ADRs and RFCs for cross-squad changes, and run architecture syncs with the Technical Director
• Maintain a technical debt and risk register covering security, compliance, and uptime, and secure roadmap funding for top items
• Address cross-cutting challenges involving agent resource usage, detection quality, upgrades and releases, backend scale and cost, and migration of performance-critical paths from Python to Go or Rust where justified by data
• Set standards for design reviews, code reviews, testing, observability, and secure SDLC
• Lead or co-lead unclear or cross-squad SEV1/SEV2 incidents, ensure blameless post-mortems are completed within 24 hours, and close follow-up actions
• Drive practical adoption of AI-augmented SDLC practices through real changes
• Mentor senior engineers and squad leads toward staff-level scope
• Act as a technical bar-raiser in hiring loops for senior and lead roles
• Represent engineering in product and sales discussions, providing estimates and feasibility assessments and avoiding dated customer commitments without a written squad-lead estimate
• Ship at least one non-trivial production change within 30 days, explain the full agent-to-backend request path, and identify the top 10 technical risks
• Own a cross-squad initiative within 90 days with an approved ADR, measured baseline, staged rollout plan, and a risk register reviewed in architecture sync
• Put the initiative into production within six months with before-and-after metrics, and have an engineering standard adopted by at least three squads
• Become the default escalation point for cross-cutting technical decisions within 12 months and mentor at least one senior engineer into broader scope

• 10+ Years building and operating production software, including 3+ years in a Staff, Principal, or Tech Lead scope spanning several teams
• Strong production experience in Python and at least one of Go or Rust
• Deep Linux internals knowledge, including processes, filesystems, networking, kernel interfaces such as inotify/fanotify or eBPF, RPM/DEB packaging, and systemd
• Experience designing and operating distributed systems at scale, including asynchronous backends, queues, databases, caching, and failure modes
• Experience owning systems running on customer machines, such as agents, daemons, or on-premises software, including upgrade safety, backward compatibility, and resource budgets
• Security mindset covering threat modeling, secure coding, and handling untrusted files, HTTP traffic, and user content
• Ability to write clear, concise technical documents and drive decisions in asynchronous remote teams across time zones
• Daily use of AI coding tools such as Cursor, Claude, or MCP-based tooling, with the ability to critically assess their output
• Будет плюсом: server security experience including antivirus/malware detection, WAF, IDS/IPS, rootkit detection, or CVE/patch management; WordPress and Node.JS web application hosting at scale; production ML for classification/detection and safe model rollout; observability at scale with Prometheus, Grafana, Sentry, ClickHouse, or similar; CI/CD ownership with GitLab CI, Jenkins, or multi-distro packaging build systems; open-source contributions in security or systems tooling

• Fully remote work with flexible working hours
• 24 Paid vacation days, 10 national holidays, and unlimited sick leave
• Private medical insurance compensation
• Co-working and gym/sports reimbursement
• Education budget
• Opportunity to receive a reward for innovative ideas the company can patent