Lead web application security engineering from Canada, combining ModSecurity expertise with AI-assisted vulnerability response and automation. Protect websites against critical threats before exploitation spreads. This lead security engineering role owns an end-to-end vulnerability response pipeline. You will analyze vulnerabilities, generate and validate WAF rules, and guide a small analyst team. The work extends WordPress security automation to ModSecurity and Coraza while connecting engineering, QA, automation, and marketing. Key Responsibilities:
Own vulnerability intake, triage, analysis, testing, release, and disclosure Extend protection from WordPress plugins to ModSecurity and Coraza Write, review, and refine SecLang security rules Build automated tests using exploits, traffic, and legitimate requests Lead analysts and improve response performance metrics Requirements:
At least five years of web or application security experience Strong ModSecurity, SecLang, OWASP CRS, or comparable WAF experience Deep knowledge of common web application attack classes Strong Python, regular expression, CI/CD, and testing skills Ability to analyze PHP code, advisories, patches, and diffs Apply web security leadership, Python automation, and WAF engineering to improve accurate protection against critical vulnerabilities.
#J-18808-Ljbffr
Lead Web Application Security Engineer in Winnipeg employer: Jobgether
EverPro is an exceptional employer that prioritizes employee growth and well-being, offering a fully remote work environment within Canada, with the added flexibility of using the Toronto office. Our culture fosters collaboration and innovation, providing competitive compensation and comprehensive wellness benefits, making it an ideal place for talented engineers to thrive and contribute to the success of our widely used invoicing platform.
