工程团队负责人 - 邮件安全(Imunify邮件及邮件网关)
Engineering Team Lead - Email Security (Imunify Email & Email Gateway)
CloudLinux 是 Imunify360 的开发者 —— 一套保护全球网站的安全产品。我们的邮件安全产品线为托管服务商提供双向解决方案:集成到托管控制面板的入站反垃圾邮件引擎,以及出站 SMTP 网关,用于保护发件人声誉并确保合法邮件不被放入垃圾箱。
我们正在寻找一位产品经理来领导开发和运营该产品线的团队。你将带领一个小型、资深、完全远程的小组(目前有 7-8 人:Go 和 Python 工程师、一位邮件可送达性工程师、一位反垃圾邮件工程师,以及数据分析师/标注员),并对团队交付的内容、系统运行的可靠性以及成员的成长负责。
这是一个需要亲力亲为的领导角色,而非纯粹的人事管理角色。预计 60% 的时间用于领导工作(交付、技术方向、辅导、事故指挥),40% 的时间用于实际工程工作(设计评审、代码评审、技术探索、生产环境调试)。你不需要是团队中技术最强的个人贡献者——你需要能够理解系统的每个部分,并对系统有可信的技术判断。
你不需要一开始就成为邮件专家。如果你曾在相关技术领域(基础设施、网络、安全、消息传递、反滥用)领导过工程师,并且有快速深入复杂技术领域的记录,我们将教你邮件相关的知识。
你将接手的系统
- 入站过滤:基于 Rspamd 的引擎,配备训练过的规则/机器学习模型,定期重新训练,并通过垃圾邮件捕获率和误报率进行评估。
- 出站网关:基于 Halon 的 SMTP 中继,支持按域名的逐步升温机制、速率限制、隔离、反馈循环(ARF)处理和客户门户——使用裸金属上的 Go 服务。
- 控制面板集成:cPanel/WHM、Plesk、DirectAdmin,以及为大型托管合作伙伴提供的 Debian/Postfix 部署。
- 数据平面:Elasticsearch、Redis、Grafana 仪表盘和告警、语料库和标注流程,为模型训练提供数据。
- 交付:GitLab、Jenkins、Jira,每周发布节奏,24 小时内完成无责复盘。
- 你将负责的工作
- 交付:
- 将产品待办事项转化为可信的、有序的工程计划——包括估算、依赖关系和团队真正执行的发布列车。
- 管理团队的周度节奏:计划、发布准备情况、用真实数据而不是形容词进行状态汇报。
查看英文原文
CloudLinux is the maker of Imunify360 — a suite of security products protecting millions of websites across the web hosting industry. Our email security line covers both sides of the email problem for hosting providers: an inbound anti-spam engine integrated with hosting control panels, and an outbound SMTP gateway that protects sender reputation and keeps legitimate mail out of the spam folder.
We are looking for a Product Owner to run the team that builds and operates this product line. You will lead a small, senior, fully remote squad (currently 7–8 people: Go and Python engineers, a deliverability engineer, an anti-spam engineer, and data analysis/annotation) and be accountable for what the team ships, how reliably it runs, and how the people on it grow.
This is a hands-on lead role, not a pure people-management role. Expect roughly 60% leadership (delivery, technical direction, coaching, incident command) and 40% hands-on engineering (design reviews, code review, spikes, production debugging). You are not expected to be the top individual contributor on the team — you are expected to be able to read every part of the system and hold a credible technical opinion about it.
You don't need to arrive as an email expert. If you have led engineers in an adjacent technical domain — infrastructure, networking, security, messaging, anti-abuse — and have a track record of getting deep into complex technical territory fast, we will teach you the email side.
The system you would inherit
- Inbound filtering: an Rspamd-based engine with a trained rule/ML model, released on a regular retraining cycle and measured on spam catch rate and false-positive rate.
- Outbound gateway: a Halon-based SMTP relay with per-domain warm-up ladders, rate limiting, quarantine, feedback-loop (ARF) processing, and a customer portal — Go services on bare metal.
- Panel integrations: cPanel/WHM, Plesk, DirectAdmin, plus Debian/Postfix deployments for large hosting partners.
- Data plane: Elasticsearch, Redis, Grafana dashboards and alerting, corpus and annotation pipelines feeding model training.
- Delivery: GitLab, Jenkins, Jira, weekly release cadence, blameless post-mortems within 24 hours.
What you will own
Delivery:
- Turn the product backlog into a credible, sequenced engineering plan — estimates, dependencies, and a release train the team actually hits.
- Run the team's weekly cadence: planning, release readiness, status reporting with real numbers rather than adjectives.
- Own engineering quality gates for model releases: no detection model ships without a measured catch rate and false-positive deltas against the previous model, and a rollback path.
- Keep technical debt visible and funded — negotiate it into the roadmap rather than absorbing it silently.
- Report delivery status and risk to engineering leadership weekly; every item carries an owner and a due date.
Technical direction:
- Own the architecture of the email stack together with the architecture group: review designs, write and approve ADRs, and make build-vs-buy calls with explicit trade-offs.
- Review code and designs on the critical path — mail flow, rate limiting, quarantine, authentication — and set the bar for tests, observability, and safe rollout.
- Own production health: SLOs, alerting, capacity, and the deliverability posture of our sending infrastructure (IP reputation, SPF/DKIM/DMARC, rDNS, RBL listings).
- Act as incident commander for product-impacting events: coordinate remediation across teams, keep partners informed, and author the post-mortem within 24 hours with named owners and dates.
People:
- Lead a distributed team across the globe: 1:1s, goal setting, performance reviews, and career development.
- Hire: define the profile, run technical interviews, onboard, and mentor engineers
- Set the working agreements that make async work — written decisions, public-by-default communication, durable artifacts over meetings.
AI-augmented engineering:
We evaluate engineers here partly on how effectively they work with coding agents. As the lead you are expected to model and coach this: prompt specificity, review quality on agent-generated code, tool-boundary awareness, context provision, iteration effectiveness, error recovery, and end-to-end task completion. The team has already scaffolded its repositories for agent-assisted development; extending that to the model and rule pipelines is live work
First 90 days:
- 30 days: Own the release train and the weekly status; be able to trace an inbound message and an outbound message end to end through the stack; complete 1:1s with every team member and produce a written read on the team's strengths and gaps.
- 60 days: Own on-call and incident command for the product line; publish the current SLOs and the top three reliability risks with mitigations; land at least one non-trivial change yourself.
- 90 days: Present a technical roadmap for the email stack agreed with the PO and the architecture group, including a debt-paydown line item and a staffing recommendation.
Requirements
Must have:
- 5+ years as a software engineer, with 2+ years leading a team of engineers (team lead, tech lead with people responsibility, or engineering manager) in a product company.
- Strong Linux proficiency at a software engineer (user) level; comfortable reading and reviewing production code in a modern high-level programming language (Python, Go, etc.), and debugging live systems on the box.
- Track record of shipping and operating a distributed backend service under real production load — you have carried a pager and run incidents.
- Experience mastering a complex technical domain quickly and making credible architectural decisions in it.
- Practical fluency with observability and data tooling to judge quality yourself, not via reports (Grafana, Kibana/Elasticsearch, Redash or equivalents).
- Demonstrated people leadership: 1:1s, performance conversations, hiring, and growing engineers.
- Experience working in an agentic / AI-assisted development workflow.
- Understanding of ML-driven systems, including model quality evaluation, training, and production operations.
- Professional proficiency in English, written and spoken.
- Availability to work EU hours.
Nice to have:
- Working knowledge of email infrastructure: SMTP, SPF/DKIM/DMARC, rDNS, IP reputation and warm-up, RBLs, feedback loops.
- Experience with open-source mail stacks — Rspamd, SpamAssassin, Postfix, Exim, Halon — or the web hosting ecosystem (cPanel/WHM and other control panels).
- Exposure to the ML model lifecycle: training data quality, evaluation metrics, and the trade-offs in tuning detection systems.
- Experience running incident and escalation management with external partners.
Benefits
What's in it for you
- A focus on professional development
- Interesting and challenging projects
- Fully remote work with flexible working hours — schedule your day and work from any location worldwide
- Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leave
- Compensation for private medical insurance
- Co-working and gym/sports reimbursement
- Budget for education
- The opportunity to receive a reward for the most innovative idea that the company can patent
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (), which provides detailed information on how we maintain and handle your data.
Originally posted on Himalayas