Lead web application security engineering from Canada, combining ModSecurity expertise with AI-assisted vulnerability response and automation. Protect websites against critical threats before exploitation spreads.This lead security engineering role owns an end-to-end vulnerability response pipeline. You will analyze vulnerabilities, generate and validate WAF rules, and guide a small analyst team. The work extends WordPress security automation to ModSecurity and Coraza while connecting engineering, QA, automation, and marketing.Key Responsibilities:
Own vulnerability intake, triage, analysis, testing, release, and disclosureExtend protection from WordPress plugins to ModSecurity and CorazaWrite, review, and refine SecLang security rulesBuild automated tests using exploits, traffic,



and legitimate requestsLead analysts and improve response performance metricsRequirements:
At least five years of web or application security experienceStrong ModSecurity, SecLang, OWASP CRS, or comparable WAF experienceDeep knowledge of common web application attack classesStrong Python, regular expression, CI/CD, and testing skillsAbility to analyze PHP code, advisories, patches, and diffsApply web security leadership, Python automation, and WAF engineering to improve accurate protection against critical vulnerabilities.
J-18808-Ljbffr

📌 Lead Web Application Security Engineer Winnipeg (Canada)
🏢 Jobgether
📍 Canada