Remote Jobs

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: https://cloudlinux.com/ Imunify360 is CloudLinux's security suite for Linux web servers: real-time and background malware scanning, automated cleanup, a WAF, runtime PHP protection (Proactive Defense), a database malware scanner, and IP reputation. It runs on hosting providers' shared, VPS, and dedicated servers, so new web-malware campaigns land on our fleet early. We sit on one of the largest labeled corpora of live web-server malware in the industry: files, verdicts, cleanup outcomes, and analyst decisions collected from production hosting servers every day. It already drives our signatures, heuristics, and ML models, and there is far more to get out of it. We are looking for a Senior ML Engineer who will turn that data into detection that ships — classifiers, LLM-assisted triage and generated signatures — and keep exploring new ML/LLM methods against it, measured by the product's false-negative and false-positive rates, not by notebook accuracy. Our dataset focuses on web malware — PHP, JavaScript, HTML phishing kits, infected WordPress and Joomla plugins and themes, database injections — with the context around each file. What you'll work with: • Malware samples from production servers, with verdicts and analyst decisions • Years of signatures and detection rules • Customer-reported false negatives and false positives • Runtime behavior of code on live sites • Web-attack traffic • File metadata and how files spread across servers • Cleanup outcomes, including what came back What you will do: The goal is 10x more malware detected at the same or lower false-positive rate. Hand-written rules and faster pipelines will not get there; models trained on our data might. • Decide which files on a server deserve a closer look, within tight CPU and memory budgets • Tell malicious code from benign at fleet scale and a sensible cost per file • Generate detection signatures automatically from new campaigns • Catch malware that only looks malicious in context, such as phishing pages and script injections • Route each file to the right detection engine • Make cleanup precise so sites stay clean afterwards • Prove each model improves detection before it ships How we work: You get an experimentation track, GPUs, and a direct line to leadership; in return, you bring numbers, not opinions. • Remote-first, async across UTC−5 to UTC+8. Decisions are written down (ADR-Lite) and public by default. • Hardware follows evidence: Each training direction starts with dedicated GPUs on our own bare metal; leadership has committed to fund more when the case is made with data. • Agentic engineering: Claude and Codex are the default tools, wired to GitLab, Jenkins, Redash, Jira, and Slite through MCP servers. We look at how engineers work with agents — context, specificity, review quality — not only at output. • Close to ground truth: You work daily with malware analysts, detection and infrastructure engineers, and the rest of our ML team. • Ship gates: No model or build goes out if it raises false positives or false negatives on our past-error sets. Blameless post-mortems within 24 hours. What you'll deliver: You own the path from raw samples to a model in production, and the numbers that prove it helped. • First month: A first model trained on production data and measured against today's engines — suspicious-file triage or a metadata model. The evaluation harness in place: splits by time and campaign so families don't leak, and a regression set from past FPs and FNs. • By month 3: Several models in production: some in shadow mode building evidence, some live and producing real detections, all gated on the past-error regression set. A training setup that keeps its GPUs busy. A written proposal (ADR) for the detection cascade, with cost per file and hardware needs. • By month 12: Models are a main source of new detections, reported as share of new detections and FN-rate trend. Retraining on fresh analyst and FN labels on a fixed cadence. Generated signatures inside the analyst workflow. Two or three parallel training directions that other engineers can run with your tooling. Requirements What you bring: • 5+ years building ML systems that ran in production, including 2+ in an adversarial domain: security, abuse, fraud, or spam. • Y ou have trained and fine-tuned transformer models yourself — data preparation, tokenizing code, LoRA/QLoRA or full fine-tunes, distillation, quantization — not only called hosted APIs. • Classic ML depth: gradient boosting, linear models on sparse …

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: https://cloudlinux.com/ CloudLinux Inc. develops the Imunify family of security products , designed to protect hosting environments from a wide range of cyber threats. One of these solutions is Imunify Email , an email security product that protects hosting servers against spam, phishing, and other email-based threats. Imunify Email filters mail on about 5,000 hosting servers. Today the filter is rspamd with rules and a scoring model we train in-house. We are replacing it with a transformer we trained ourselves that runs on the customer's own CPU in under 100 MB and already beats rspamd at every operating point we measured. We are looking for a Senior Machine Learning Engineer to join our team and work alongside the engineer currently responsible for both the existing spam-filtering pipeline and the new ML model. Together, you will drive the development, improvement, and production rollout of our email security technology. What you will do: • Train, evaluate, and release spam-detection models: build the corpus, pick the threshold, read the precision/recall report, decide ship or retrain. • Build the production side of the new engine in Go: the inference service, the mail-filter integration, the tokenizer, the streaming message parser. • Fix detection quality end to end, from a customer's "this phishing got through" to a rule, a corpus fix, or a retrain, with the false-positive cost weighed against the catch. • Keep the corpus tooling and training infrastructure running. • Review and approve classifier, rule, and model changes, so no release waits on one person. • Answer partner engineers who ask why a message scored the way it did. • Write specs, handbooks, and post-mortems. That is how this team transfers knowledge. Your first six months: • Month 1: you ship a rule-model release on your own. • Month 3: your first piece of the new engine is merged and running on staging. • Month 6: a model release goes out while the principal engineer is away. Requirements What you bring: • 5+ years of shipping detection or classification systems where false positives have a cost you had to defend: anti-spam, anti-phishing, anti-malware, fraud, abuse. • You have taken at least one ML classifier to production yourself: corpus construction, threshold selection, error analysis. • Hands-on transformer training in PyTorch: tokenizers, masked-language pre-training, fine-tuning, ONNX export, CPU inference measurement. • Linux, shell, and Python on shared servers and a shared GPU. • Daily usage of AI coding agents and tools. • English at upper-Intermediate (B2) level or higher , with particularly strong written communication skills for technical documentation, specifications, and code reviews. Your specs and merge-request descriptions count as much as your code. It is a strong plus if you have: • Email internals: SMTP, MIME, transfer encodings, SPF / DKIM / DMARC, how Exim, Postfix, and Dovecot handle mail to a filter. • Experience in creating embedded models • Go or Rust for systems code: parsers, streaming, memory budgets, concurrency. • rspamd or SpamAssassin internals: rules, composites, Lua plugins, mass-check scoring. • Multi-million-sample corpora, labelling pipelines, annotator tooling. • Small models for constrained hardware: quantization, distillation, latency budgets. • LLM-based labelers or validators for scaling annotation. • Hosting panels: cPanel, Plesk, DirectAdmin. Benefits What's in it for you? • A focus on professional development. • Interesting and challenging projects. • Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. • Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. • Compensation for private medical insurance. • Co-working and gym/sports reimbursement. • Budget for education. • The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com Imunify360 Security Suite is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. We are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. The challenge ahead When a critical vulnerability in a popular web application or WordPress plugin goes public, attackers start exploiting it within hours. Most site owners can't patch that fast. We want our customers protected before the first attack reaches them, and we want them to know it. That's the challenge we're hiring for: • AI-driven vulnerability response. Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window. • Protection plus public announcement, both automated. The same pipeline that ships the rule also produces the public advisory. Every critical vulnerability we cover is announced soon after the rule ships, so customers and the market see that Imunify closed it first. • Build on what works. An AI-assisted pipeline already runs for our WordPress protection plugin. The first big project is to extend this approach to ModSecurity/Coraza WAF rules. • Speed without breaking sites. On shared hosting, a rule that blocks legitimate traffic is a customer incident. Fast and precise both matter. • Make it measurable. Time-to-protection, coverage of critical vulnerabilities, and false-positive rate are the numbers this role owns. About the role You will own the vulnerability response pipeline end to end and be its main builder. You combine deep web application security expertise with strong automation skills, and you think about the product: what customers need, what to measure, what to build next. You'll lead a small team of security analysts and work closely with automation, QA, and marketing. What you'll do • Design and build the AI-driven pipeline from disclosure to announcement: vulnerability intake, triage, rule drafting, testing, release, and the public advisory. • Lead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules. • Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities. • Build test harnesses that check rules against exploits and real traffic before release. • Lead and mentor security analysts: set priorities, review their work, remove blockers. • Define and track time-to-protection, coverage, and false-positive rate, and improve them. • Automate advisory generation as part of the pipeline, and agree the format and review flow with marketing. Requirements What we're looking for: • 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar. • Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic. • Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions. • Able to read PHP code and understand a vulnerability from an advisory or a patch diff. • Strong Python: you've built automation pipelines that run in production. CI/CD and automated testing. • Hands-on daily use of AI/LLM tools; you know where to trust them and how to verify their output. • Proven track record of leading a technical project end to end. • Product mindset: you reason about customer impact, not only technical correctness. • Upper-intermediate English or better. Nice to have: • WordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty. • Coraza or other WAF engines. • Exploit analysis or threat intelligence background. • Linux server administration, hosting industry. Personal skills: • Strong ownership: you take a goal, not a task list. • See the whole process and find the bottleneck, not only fix individual issues. • Communicate clearly and raise risks early. • Calm under pressure: critical vulnerabilities don't wait for working hours. • Comfortable making decisions with incomplete information. Benefits What's in it for you? • A focus on professional development. • Interesting and challenging projects. • Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. • Paid 24 …

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com We are currently hiring Staff Engineers for various projects within the Imunify360 product. Imunify360 is CloudLinux's multi-layer security suite for Linux web servers: antivirus and malware cleanup, WAF, IDS/IPS, Proactive Defense, patch management (KernelCare/Patchman), and IP/domain reputation. It runs on hundreds of thousands of shared, VPS and dedicated hosting servers, under cPanel, Plesk, DirectAdmin and standalone. The engineering org is 60+ engineers in squads covering backend, core, server agent, malware research, WAF/WebShield, and Patchman. Core services are Python; agents and performance-critical paths are Go and Rust. We run on Hetzner and our own bare metal. Check out our website for more information: https://imunify360.com/ Role Mission & Scope Most complex technical challenges in Imunify360 go beyond individual squads. A single detection change can impact the scanner, agent, UI, reputation backend, and release process. While squad leads own delivery within their teams, the Staff Engineer ensures technical alignment across the product. As a Staff Engineer, you'll be a hands-on technical leader working across the entire product , focusing on the most critical and high-impact challenges as priorities evolve. You'll drive technical decisions, improve architecture, establish engineering standards, and help teams build sustainable solutions. This is an individual contributor role , without direct people management responsibilities. You'll remain actively involved in development, spending approximately 30–50% of your time writing production code , rather than focusing solely on architectural design. While deep expertise in a particular area is valued, this role requires the flexibility to work across different components, collaborate with multiple squads, and tackle challenges wherever your expertise can make the greatest impact. What you will own Architecture and technical direction • Own the end-to-end architecture of Imunify360 as a product: agent server cloud backends, data flows, and the contracts between them. • Write and drive ADRs and RFCs for cross-squad changes. Run the Wed/Fri architecture sync together with the Technical Director. • Keep a living tech-debt and risk register (security / compliance / uptime) with owners and dates, and get the top items funded on the roadmap. Hard cross-cutting problems (examples of what lands on your desk) • Agent resource footprint on dense shared hosts: CPU, memory and I/O budgets for scanning, file monitoring (inotify/fanotify) and WAF, measured on real kernels, not benchmarks from elsewhere. • Detection pipeline quality: false positive / false negative rates, signature and ML model rollout with staged gates and rollback. • Upgrade and release safety across a large, heterogeneous fleet (CentOS/AlmaLinux/CloudLinux/Ubuntu, multiple control panels, old kernels). • Backend scale and cost of reputation, ThreatIntel and telemetry services. • Migrating hot paths from Python to Go/Rust where the data shows it pays off, and saying no where it doesn't. Engineering standards • Set the bar for design reviews, code review, testing strategy, observability (Prometheus/Grafana/Sentry) and secure SDLC (OWASP ASVS, CIS Benchmarks as relevant). • Lead or co-lead SEV1/SEV2 incidents when the cause is unclear or cross-squad; make sure the blameless post-mortem ships within 24 h and its actions get closed. • Drive the AI-augmented SDLC in practice: show what good agentic coding looks like (prompt specificity, context provision, review quality, tool boundaries) on real changes, not slides. People multiplier (no direct reports) • Mentor senior engineers and squad leads toward staff-level scope. • Act as the technical bar-raiser in hiring loops for senior and lead roles. • Be the engineering voice in product and sales discussions: estimates, feasibility, and no dated customer commitment without a written squad-lead estimate. Key Milestones • 30 days: Shipped at least one non-trivial change to production. Can explain the full request path from agent to backend. Has a personal list of top 10 technical risks. • 90 days: Owns one cross-squad initiative with an approved ADR, a measured baseline, and a staged rollout plan. Published risk register reviewed in arch sync. • 6 months: That initiative is in production with before/after metrics. At least one engineering standard (e.g. release gating, agent perf budget, design review template) is adopted by 3+ squads. • 12 months: Recognized by squad leads as the …

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com We are currently hiring a Staff Security Engineer within the Imunify360 product. Imunify360 is CloudLinux's security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early — often in the first hours. Check out our website for more information: https://imunify360.com/ Role Mission & Scope At Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats — it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected. As a Staff Security Engineer , you'll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review. This is a hands-on technical leadership role focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. You'll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes. You'll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities. As an individual contributor , you won't have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices. Your mission is to strengthen Imunify360's ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale. What you will own Malware and campaign mitigation • Lead response to large-scale exploitation and malware campaigns: triage, root cause, and mitigation across every protection layer of the product. • Reverse-engineer malware and exploits targeting Linux servers and web applications. • Track campaigns over time, not just individual samples: cluster indicators, connect activity to known actors and toolkits, anticipate the next variant. • Define and run measurable outcomes per campaign: time to detect, time to protect, cleanup effectiveness, reinfection rate. Security response coordination • Own the security incident and response process, both for threats against our customers and for vulnerabilities in our own product: severity model, runbooks, communication, escalation. • Coordinate with external parties — software vendors, partners, CERTs/CSIRTs, abuse desks, other security vendors. Drive responsible disclosure where we find vulnerabilities. • Be the technical voice in security advisories and partner briefings, together with Product and Support. • Triage external vulnerability reports. Offensive security on our own product • Red-team our product and infrastructure. Assume a capable attacker who already has a foothold. • Threat-model new features before they ship; own the security review gate for high-risk changes. • Turn findings into fixes with the owning teams, not just reports. Detection engineering and tooling • Raise the quality bar of detections: false-positive budgets, test corpora, staged rollout with measurement gates and fast rollback. • Build and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage where it measurably helps. • Write production code for these tools; expect 30–50% of your time to be hands-on building. • Turn telemetry into intelligence: emerging exploits, attacker infrastructure, trends — shared as internal briefs and selected public research. People multiplier (no direct reports) • Mentor analysts and engineers; raise the security skill level across teams. • Bar-raiser in security hiring loops. Key Milestones • 30 days: Analyzed real threats end-to-end. Mapped the current response flow and where it breaks. Shipped at least one detection or mitigation to production. • 90 days: Security response process and severity model published and agreed. Led at least one real campaign response with a written post-mortem. Baseline response metrics in place. • 6 months: Time from first sighting to protection measurably reduced vs. …

CloudLinux is the maker of Imunify360 — a suite of security products protecting millions of websites across the web hosting industry. Our email security line covers both sides of the email problem for hosting providers: an inbound anti-spam engine integrated with hosting control panels, and an outbound SMTP gateway that protects sender reputation and keeps legitimate mail out of the spam folder. We are looking for a Product Owner to run the team that builds and operates this product line. You will lead a small, senior, fully remote squad (currently 7–8 people: Go and Python engineers, a deliverability engineer, an anti-spam engineer, and data analysis/annotation) and be accountable for what the team ships, how reliably it runs, and how the people on it grow. This is a hands-on lead role , not a pure people-management role. Expect roughly 60% leadership (delivery, technical direction, coaching, incident command) and 40% hands-on engineering (design reviews, code review, spikes, production debugging). You are not expected to be the top individual contributor on the team — you are expected to be able to read every part of the system and hold a credible technical opinion about it. You don't need to arrive as an email expert. If you have led engineers in an adjacent technical domain — infrastructure, networking, security, messaging, anti-abuse — and have a track record of getting deep into complex technical territory fast, we will teach you the email side. The system you would inherit • Inbound filtering: an Rspamd-based engine with a trained rule/ML model, released on a regular retraining cycle and measured on spam catch rate and false-positive rate. • Outbound gateway: a Halon-based SMTP relay with per-domain warm-up ladders, rate limiting, quarantine, feedback-loop (ARF) processing, and a customer portal — Go services on bare metal. • Panel integrations: cPanel/WHM, Plesk, DirectAdmin, plus Debian/Postfix deployments for large hosting partners. • Data plane: Elasticsearch, Redis, Grafana dashboards and alerting, corpus and annotation pipelines feeding model training. • Delivery: GitLab, Jenkins, Jira, weekly release cadence, blameless post-mortems within 24 hours. What you will own Delivery: • Turn the product backlog into a credible, sequenced engineering plan — estimates, dependencies, and a release train the team actually hits. • Run the team's weekly cadence: planning, release readiness, status reporting with real numbers rather than adjectives. • Own engineering quality gates for model releases: no detection model ships without a measured catch rate and false-positive deltas against the previous model, and a rollback path. • Keep technical debt visible and funded — negotiate it into the roadmap rather than absorbing it silently. • Report delivery status and risk to engineering leadership weekly; every item carries an owner and a due date. Technical direction: • Own the architecture of the email stack together with the architecture group: review designs, write and approve ADRs, and make build-vs-buy calls with explicit trade-offs. • Review code and designs on the critical path — mail flow, rate limiting, quarantine, authentication — and set the bar for tests, observability, and safe rollout. • Own production health: SLOs, alerting, capacity, and the deliverability posture of our sending infrastructure (IP reputation, SPF/DKIM/DMARC, rDNS, RBL listings). • Act as incident commander for product-impacting events: coordinate remediation across teams, keep partners informed, and author the post-mortem within 24 hours with named owners and dates. People: • Lead a distributed team across the globe: 1:1s, goal setting, performance reviews, and career development. • Hire: define the profile, run technical interviews, onboard, and mentor engineers • Set the working agreements that make async work — written decisions, public-by-default communication, durable artifacts over meetings. AI-augmented engineering: We evaluate engineers here partly on how effectively they work with coding agents. As the lead you are expected to model and coach this: prompt specificity, review quality on agent-generated code, tool-boundary awareness, context provision, iteration effectiveness, error recovery, and end-to-end task completion. The team has already scaffolded its repositories for agent-assisted development; extending that to the model and rule pipelines is live work First 90 days: • 30 days: Own the release train and the weekly status; be able to trace an inbound message and an outbound message end to end through the stack; complete 1:1s with every team member and produce a written read on the team's strengths and gaps. • 60 days: Own on-call and incident command for the product line; publish the current SLOs and the top three reliability risks with mitigations; land at least one non-trivial change yourself. • 90 days: Present a technical roadmap for the email stack agreed with the PO and the …

CloudLinux builds Linux infrastructure and security products. You will join our Automation & Management Services cell, working closely with Technical Program Manager to solve problems across teams and services: cloud-cost data, infrastructure inventory, network policies and capacity workflows. Check out our website for more information https://cloudlinux.com/ We are looking for a Senior Automation Engineer to join the Infrastructure team. You will independently own agreed outcomes—from clarifying the need with engineering teams, Finance or Security to delivering and operating a useful system. The work includes new development, improvements, repairs and maintenance. There is no traditional on-call rotation; you respond to alerts from your own systems during working hours. What you will do • Turn an incomplete brief into an agreed result and workable plan. Track cross-team dependencies, explain tradeoffs, raise blockers early and communicate changes to estimates. Confirm completion with the users. • Build maintainable software and cloud/infrastructure API integrations. Handle credentials, pagination, retries, partial failures and repeated execution so unattended workflows remain safe and reliable. • Transform billing, usage and inventory data into repeatable outputs. Reconcile totals and periods, apply agreed allocation rules and make missing or uncertain mappings visible. • Extend inventory, network-policy and capacity automation using existing systems. Retain necessary human decisions and verify the operational result. • Deliver changes through version-controlled code and CI. Understand live state, test recovery and release safely; diagnose failures across code, Linux, APIs, data and networking. • Own monitoring, actionable alerts, documentation and maintenance. Leave systems another engineer can operate, and use coding agents while remaining responsible for design, code, tests and outcomes. Requirements Must have • Senior-level experience, typically 5+ years in software, infrastructure, platform or automation engineering. You can explain your own design decisions, implementation and operational results. • Strong production Python, software design, testing, debugging and API integration skills. You can understand unfamiliar code and improve existing systems. • Hands-on AWS experience and solid Linux/networking fundamentals, including diagnosis across host, service, network and cloud boundaries. • Practical SQL and data validation: joins, units, periods, ownership mappings and reconciliation. You distinguish evidence from assumptions. • Safe infrastructure delivery through IaC and CI: state, drift, idempotency, dependencies and rollback, using tools such as Terraform/OpenTofu and Ansible. • Demonstrated advanced coding-agent workflows for real engineering tasks. You plan and delegate substantial work, supply context, run agents without continuous supervision within defined permissions and stop conditions, and independently explain, debug, test and verify their output. • Autonomous delivery and clear collaboration: investigate problems, obtain decisions, challenge unsafe or unnecessarily complex approaches and follow through. English B2 or higher for technical discussions, written decisions and internal customer communication. Nice to have • Experience with cloud billing or FinOps tooling (e.g. AWS CUR/FOCUS, Athena), inventory or event-driven integrations (e.g. NetBox or similar), network policies, flow monitoring, identity and access management, capacity tooling, additional cloud platforms, OpenNebula, Kubernetes, Go, or self-service systems. • Our environment includes Python, Ansible, Terraform/OpenTofu, GitLab CI/CD, Grafana, and related observability tools. Prior experience with every tool or domain is not required. We value the ability to quickly learn unfamiliar technologies, products, and internal business rules. Benefits What's in it for you? • A focus on professional development. • Interesting and challenging projects. • Fully remote work with flexible working hours, which allows you to schedule your day and work from any location worldwide. • Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. • Compensation for private medical insurance. • Co-working and gym/sports reimbursement. • Budget for education. • The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information https://cloudlinux.com/ Imunify360 Security Suite is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. The mission We protect web hosting providers and the sites running on their infrastructure through a defense-in-depth stack: web-server-layer WAF, runtime application self-protection for PHP, deep application integrations (WordPress plugins and similar), a malware scanner with cleanup capability, and network-layer firewalls and IP reputation. The pieces talk to each other, and the threat intelligence they generate at scale powers detection across the stack. Node.js is the segment of the hosting market growing fastest, and the next layer we want to build for it is runtime protection inside the Node.js process itself. Most Node.js workloads on managed hosting today are AI-generated web apps deployed by non-technical owners who can't, won't, and shouldn't be expected to patch their own code or audit their own dependencies. We're going to defend those apps anyway — at runtime, without their cooperation, without breaking them. You'll build that runtime protection layer end-to-end. What you'll own • The product. A brand-new product line, yours to define — what we intercept, what we don't, what the customer-visible surface looks like. • The technical approach. Instrumentation strategy, deployment shape, programming language — all open. You'll consult with our architects but the direction is yours. • Implementation, end to end. You'll have the full tooling stack we provide — LLM subscriptions, modern dev infrastructure, the works. Use what makes you fast. • Methodology. How you build conviction in your detection logic — your call. • Cross-layer signal. Our existing stack produces threat intelligence at unmatched scale: tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds. These are available for you to plug into. Use what helps. How we'll measure success The product is held to four numbers: runtime overhead, false positives, false negatives, and customer-escalation volume. They reflect what hosting providers and their customers care about. Hit them well and the product runs inside a meaningful slice of the modern Node.js web. What we're looking for An experienced researcher or engineer who can build and iterate on a brand-new product, driving both the research and the development. The hard part of this work is knowing what's malicious, what's vulnerable, and what's just an unusual but legitimate pattern — and being right about it across the long tail of frameworks, libraries, and customer code we'll encounter in production. Requirements Must have: • Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch. • Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration. • Strong web application security knowledge and current knowledge of practical exploitation. • A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code. • Ability to start as the PM, architect, lead engineer, and QA for this product. You ask for resources or help when you need them; you don't wait to be told what to do. • Comfort directing AI coding agents to high-quality output. Nice to have: • Prior work on runtime-protection products, application firewalls, or instrumentation tooling. • Background in malware analysis or incident response. • Familiarity with managed-hosting environments. • Public security research, vulnerability disclosures, or detection rulesets you've authored. • Familiarity with the Node.js runtime and the JavaScript ecosystem. What it's not • Not a scope-and-handoff role — you drive the work and own the outcome. • Not a "platform team will productize this later" role — you ship to real customer fleets and watch the telemetry quickly. • Not a spec-and-review role — you are hands-on every day. Why this matters • Most managed-hosting customers are not developers. They cannot patch their apps. They cannot audit their dependencies. They will keep deploying vulnerable code from AI assistants …

CloudLinux / TuxCare is a remote-first infrastructure and security company. More than 300 engineers build and operate products used by hosting providers, enterprises, and internal service teams worldwide. Our Infrastructure Department runs the platforms behind CloudLinux OS, Imunify, KernelCare, TuxCare ELS, and our engineering systems. We are hiring a Senior Database Reliability Engineer to join the Infrastructure DBA cell. This is a hands-on production ownership role, not a narrow ticket-processing DBA position. You will keep critical database services reliable, automate repeated work, support engineering teams, and reduce single-person dependency in our PostgreSQL, ClickHouse, MongoDB, and Redis operations. PostgreSQL is the main requirement. ClickHouse experience is a strong plus, but it is not a day-one blocker. We need a senior engineer with enough database, Linux, automation, and incident-response depth to learn our ClickHouse environment quickly and operate it safely. Your Responsibilities: • Own production PostgreSQL reliability: HA design, Patroni, PgBouncer, replication, failover, upgrades, vacuum/bloat control, query tuning, locks, indexes, capacity, backups, PITR, and restore validation. • Improve disaster recovery and operational evidence: tested restores, documented recovery paths, measurable RTO/RPO targets, runbooks, and safe maintenance plans. • Support the wider database estate: ClickHouse, MongoDB, and Redis. You will troubleshoot incidents, review access and data-safety changes, improve monitoring, and learn the production ClickHouse patterns already in use. • Automate DBA workflows with Ansible, Terraform/OpenTofu, GitLab CI/CD, scripts, and reproducible runbooks for provisioning, grants, backups, restores, health checks, and ownership metadata. • Help build DBaaS-style self-service capabilities so engineering teams can request databases, access, credentials, and operational checks with less manual DBA intervention. • Improve observability and incident response through Grafana, metrics, logs, SLOs, alert rules, Opsgenie routing, and clear communication during production issues. What Success Looks Like: • PostgreSQL clusters have tested backup and restore paths, useful dashboards, clear ownership, and documented failover procedures. • Repeated DBA tickets become automation or self-service workflows. • ClickHouse operational knowledge is no longer a single-person dependency. • Database incidents have owners, runbooks, evidence, and measurable recovery paths. • Product and engineering teams get database help faster without sacrificing safety, auditability, or reliability. Why CloudLinux? • You will work on real production infrastructure used across CloudLinux and TuxCare products. • You will have a direct impact on reliability, incident response, developer experience, and operational resilience. • You will also work in an AI-assisted engineering culture where automation, documentation, Claude, Codex, and careful human verification are part of the daily operating model. Requirements What We Expect From You: • Deep hands-on PostgreSQL experience in business-critical production environments, typically 5+ years or equivalent depth. • Strong understanding of PostgreSQL internals and operations: MVCC, WAL, transactions, locks, indexes, query planning, replication, autovacuum, bloat, major upgrades, backups, PITR, and restore testing. • Proven experience with highly available databases and the ability to reason about quorum, split-brain risk, failover, rollback, and recovery. • MongoDB replica sets and Percona Backup for MongoDB. • Strong Linux and infrastructure fundamentals: systemd, networking, storage, filesystems, CPU/memory/disk bottlenecks, TLS, DNS, firewalls, and root-cause troubleshooting. • Automation skills with Ansible and scripting. Terraform/OpenTofu, GitLab CI/CD, and merge-request based delivery are strong advantages. • Ability to support more than one database engine. You do not need to be a ClickHouse expert on day one, but you must be ready to learn it quickly and take responsibility for it. • Practical use of AI engineering assistants such as Claude and Codex. We expect you to use them to improve speed and quality, while personally verifying generated SQL, commands, scripts, and operational conclusions. • English - upper-intermediate or higher - to ensure clear communication of progress within the teams. Nice to Have: • ClickHouse operations: replication, Keeper/ZooKeeper, MergeTree engines, distributed DDL, grants, row policies, backups, query troubleshooting, and cluster recovery. • Redis/Sentinel and broker/cache failure modes. • Database observability, SLOs, golden signals, alert tuning, and executable incident runbooks. • Building internal platforms, self-service portals, or DBaaS workflows for engineering teams. Benefits What's in it for you? • A focus on professional development. • Interesting and challenging projects. • Fully …

CloudLinux is transforming the Linux infrastructure market by ensuring security and stability for over 500,000 servers worldwide. Our products - CloudLinux OS and Imunify360 - are the de facto standard in the hosting industry and Enterprise segment. We are seeking a visionary engineer to lead the evolution of our data platform. In 2025, we are shifting from classic database administration to an Internal Database-as-a-Service (DBaaS) model. We need a specialist who doesn’t just "configure backups," but designs resilient distributed systems, writes code to automate infrastructure, and transforms databases into a reliable service for product teams. If you are tired of endless tickets and want to build platforms capable of processing petabytes of data, this role is for you. Your Challenges & Responsibilities: • DBaaS Architecture: Design and implement a self-service platform based on Terraform and Ansible , enabling the deployment of HA clusters (PostgreSQL and ClickHouse, MongoDB, Redis) in a heterogeneous environment (Bare Metal + OpenNebula + Kubernetes + Public Clouds). You will turn infrastructure into a product. • Scaling ClickHouse: Manage exponentially growing analytics clusters (12+ clusters, tens of terabytes of data). You will tackle sharding, table engine optimization (ReplicatedMergeTree), and building reliable S3 backup pipelines under high load. • Data Platform & Analytics Support: Maintain and scale the infrastructure for Apache Airflow and Redash. You will ensure the reliability of ETL pipelines and visualization tools, bridging the gap between raw infrastructure and the data analytics team. • Reliability as Code: Implement SRE practices in data management. Replace manual incident response with automated self-healing mechanisms. Define and implement SLO/SLI for all databases. • Stack Modernization: Lead the migration process from legacy solutions to modern cloud patterns. Participate in decision-making regarding the implementation of Kubernetes operators for stateful workloads. • Expertise & Mentorship: Serve as the technical authority for product teams, helping them optimize data schemas and SQL queries for high-load systems. Our Tech Stack: • Databases : PostgreSQL 15+ (Patroni, PgBouncer), ClickHouse (Sharded/Replicated), MongoDB, Redis, Kafka • Data & Analytics: Apache Airflow, Redash (Infrastructure & Integration). • Infrastructure: Own 3+DC colocation (OpenNebula, Kubernetes, Bare Metal), AWS, Google Cloud, Azure, DO – Hybrid Cloud. • Automation & IaC: Terraform, Ansible, Python/Go, GitLab, Jenkins, Gerrit. • Observability : VictoriaMetrics, Grafana, Loki. Why CloudLinux? • Culture: A Remote-first company with an "Employees First" principle. We value results, not hours in the office. • Impact: Your architectural decisions will determine the stability of services used by thousands of companies around the world. • Growth: We support professional development and pay for training and conferences. Requirements What We Expect From You: • AI-Augmented Engineering: You don't view AI as a replacement for deep technical fundamentals, but as a high-leverage tool. We actively use AI agents (Claude, Codex, Gemini, etc.) to automate boilerplate, analyze complex logs, and speed up research. We expect you to be open to modern workflows and integrate AI into your day-to-day operations, allowing you to focus your brainpower on the true architectural challenges. • Deep PostgreSQL Expertise (5+ years): You know MVCC internals, understand locking mechanics, can configure Patroni and PgBouncer "with your eyes closed," and have experience with seamless major version upgrades under load. • ClickHouse Mastery: Experience operating large clusters, understanding ZooKeeper/ClickHouse Keeper, sharding, replication internals, and the ability to diagnose performance issues at the data-part level. • Engineering Mindset (SRE/DevOps): You hate doing the same task twice by hand. Experience writing complex Terraform modules and Ansible roles is mandatory. Programming skills in Python or Go for automation are a huge plus. • Hybrid Environment Experience: You understand the differences between running DBs on Bare Metal vs. Kubernetes vs. Cloud and know how to optimize TCO and disk subsystem performance (NVMe, Network Storage). • Systems Approach: You see the big picture - from the network packet to the application business logic. You understand the importance of security (FIPS, Audit logs) and Disaster Recovery. • English: upper-intermediate or higher - to ensure clear communication of progress within the teams Nice to Have: • Experience building an Internal Developer Platform (IDP). • Experience operating databases in Kubernetes (CloudNativePG, Altinity Operator). • Experience working in Cloud and Hosting providers on similar services. Benefits What's in it for you? • A focus on professional development. • Interesting and challenging projects. • Fully remote work with flexible working …