Lead web application security engineering from Canada, combining Mod Security expertise with AI-assisted vulnerability response and automation. Protect websites against critical threats before exploitation spreads.This lead security engineering role owns an end-to-end vulnerability response pipeline. You will analyze vulnerabilities, generate and validate WAF rules, and guide a small analyst team. The work extends Word Press security automation to Mod Security and Coraza while connecting engineering, QA, automation, and marketing.Key Responsibilities: Own vulnerability intake, triage, analysis, testing, release, and disclosureExtend protection from Word Press plugins to Mod Security and CorazaWrite, review, and refine Sec Lang security rulesBuild automated tests using exploits, traffic,



and legitimate requestsLead analysts and improve response performance metricsRequirements: At least five years of web or application security experienceStrong Mod Security, Sec Lang, OWASP CRS, or comparable WAF experienceDeep knowledge of common web application attack classesStrong Python, regular expression, CI/CD, and testing skillsAbility to analyze PHP code, advisories, patches, and diffsApply web security leadership, Python automation, and WAF engineering to improve accurate protection against critical vulnerabilities.#J-18808-Ljbffr

📌 Lead Web Application Security Engineer (Winnipeg)
🏢 Jobgether
📍 Winnipeg