Engineering Manager, Language Security Research at CloudLinux

About TuxCare

TuxCare provides a comprehensive portfolio of security solutions for Linux and open-source software, specifically designed for enterprise organizations. Our offerings enable enterprises to automate live vulnerability patching, minimize downtime, ensure application security and compliance, and receive expert support from a team specializing in Linux security. We cover the most popular Linux distributions, end-of-life systems, programming languages, and much more.

We are actively seeking an experienced Engineering Manager to lead TuxCare's Language Security Research function. This critical group comprises four dedicated teams responsible for delivering essential security patches for both end-of-life (EOL) and non-EOL open-source language runtimes and frameworks. TuxCare's Endless Lifecycle Support (ELS) empowers organizations to securely continue using end-of-life software by providing security patches for unsupported versions of Linux distributions and various language ecosystems, including Java, JavaScript/Node.js, Python, PHP, Go, Spring, Angular, Django, Flask, and others.

This role is primarily management-focused within a highly technical delivery environment. It requires strong engineering leadership combined with broad expertise in language ecosystems. You will be responsible for managing four teams, totaling approximately 18 engineers, across Java, JavaScript/Go, Python, and PHP disciplines. Your responsibilities will include setting the technical direction and operational standards for the entire function.

Useful links:

• CVE coverage: https://cve.tuxcare.com/els/cve
• ELS for Languages documentation: https://docs.tuxcare.com/els-for-languages/

What You Will Own

People & Teams

• Lead and foster the professional development of four engineering teams (Java, JavaScript/Go, Python, PHP), comprising around 18 engineers.
• Cultivate a culture of technical excellence, accountability, and continuous improvement within your teams.
• Develop hiring plans, conduct thorough performance reviews, and drive career advancement for your direct reports.
• Oversee the onboarding and ramp-up processes for new team members, projects, and libraries integrated into the team's scope.

Technical Direction

• Establish and enforce stringent standards for CVE analysis, vulnerability assessment, patch backporting, and security release processes across all supported language ecosystems.
• Promote and ensure consistency in tooling and workflows across all teams, including CI/CD pipelines, patch delivery, and release processes.
• Evaluate and guide the implementation of AI-assisted automation for backporting and discovering new vulnerabilities.
• Serve as the ultimate technical escalation point for complex or cross-team security issues.

Delivery & Operations

• Ensure compliance with Service Level Agreements (SLAs) across all language platforms.
• Align team efforts with client expectations and meet delivery commitments.
• Continuously organize and refine development workflows and engineering processes.
• Coordinate internal documentation efforts, ensuring they accurately reflect the current state of each project.
• Facilitate seamless coordination between language teams and the OS, Docker, and platform teams.
• Effectively manage scope boundaries and address overlaps with OS and platform teams, particularly concerning shared dependencies and cross-ecosystem vulnerabilities.

Requirements

Must have:

• A strong foundation in software development across multiple language ecosystems, with at least 6 years of hands-on experience.
• Solid Java experience is mandatory; working knowledge of additional languages such as JavaScript, Go, Python, or PHP is a significant advantage.
• At least 3 years of engineering leadership experience (Team Lead or Engineering Manager) within a product-oriented company.
• Practical experience with security research or vulnerability analysis, including CVE triage, patch backporting, or similar activities.
• Demonstrated experience in technical delivery and accountability for team outcomes.
• Proven ability to work effectively within distributed teams and larger organizational structures.
• Excellent communication skills, enabling effective interaction with stakeholders and successful management of external delivery expectations.
• Experience in building or enhancing engineering processes from the ground up.
• Familiarity with CI/CD systems (e.g., GitLab CI, Jenkins) and dependency management tools (e.g., Maven/Gradle, npm, pip, Go modules).
• Upper-intermediate or higher proficiency in English (both written and spoken).

Nice to have:

• Hands-on experience in identifying and analyzing vulnerabilities within language-ecosystem applications.
• A deep understanding of the security vulnerability lifecycle (CVE, CVSS, CWE, CSAF/VEX).
• Background in open-source security, supply chain security, or products similar to ELS.
• Experience integrating AI tools into research or patching workflows.
• Knowledge of Docker, Kubernetes, or cloud-native ecosystems.

Benefits

What's in it for you?

• A strong commitment to professional development, offering ample opportunities for continuous learning and growth.
• A fully remote work environment with flexible working hours, providing the freedom to schedule your day and work from any location worldwide.
• Generous paid time off, including 24 days of vacation per year, 10 national holidays, and unlimited sick leaves to promote a healthy work-life balance.
• Compensation for private medical insurance.
• Reimbursement for co-working spaces and gym/sports memberships.
• The unique opportunity to receive a reward for developing innovative ideas that the company can patent, fostering a culture of creativity and innovation.

By applying for this position, you consent to the processing of your personal data as outlined in our Privacy Policy, which details how we manage and maintain your data.