Application Security Engineer

Insight Global; Atlanta (GA); On-site; USD 69,000 - 83,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA

FSA

DCFSA

401k with employer matching

Paid sick leave/ PTO

Job summary

Insight Global in Atlanta, GA seeks an experienced security engineer to remediate vulnerabilities across web applications, with emphasis on WordPress hardening and PCI-DSS compliance. You will collaborate with software engineers to implement secure coding standards and address findings from scans, pen tests, and code reviews.

The role covers frontend and backend stacks, APIs, and secure review of WordPress core, themes, and plugins, with emphasis on patching vulnerabilities and maintaining

Qualifications

• Experience remediating security vulnerabilities in web/frontend apps.
• Knowledge of PCI-DSS requirements, especially payment page security.
• Strong secure coding principles and application security practices.
• Experience addressing findings via vulnerability scanning tools.
• Experience reviewing WordPress core, custom themes, and plugins.
• Ability to assess vulnerable WordPress plugins and deploy patches.
• Experience performing secure code reviews.
• Ability to work across frontend and backend stacks.
• Understanding of APIs and web app architecture.
• Familiarity with Ruby-based environments is helpful

Responsibilities

• Assess, prioritize, and remediate application security vulnerabilities.
• Collaborate with engineers to enforce secure coding standards.
• Address findings from scans, penetration testing, and code reviews.
• Review and secure WordPress core, themes, and plugins.
• Evaluate vulnerable WordPress plugins and apply mitigations.
• Support PCI-DSS compliance initiatives including script integrity monitoring.
• Monitor and remediate risks from malicious scripts on payment pages.
• Help establish repeatable security processes to prevent future issues.

Skills

Application Security

PCI-DSS Compliance

Secure Coding

Vulnerability Remediation

WordPress Security

Frontend & Backend

API Security

Security Audits

Code Review

Security Automation

Tools

WordPress Core

WordPress Themes

WordPress Plugins

Vulnerability Scanners

AWS

GCP

CI/CD Pipelines

Job description

• Hands-on experience remediating security vulnerabilities within web or frontend applications.
• Experience working with PCI-DSS compliance requirements, especially payment page security.
• Strong understanding of secure coding principles and application security best practices.
• Experience addressing vulnerabilities identified through:
  • Vulnerability scanning tools
• Experience reviewing, modifying, and securing:
  • WordPress Core
  • Custom Themes
  • Third-Party Plugins
• Proven ability to assess vulnerable WordPress plugins, implement fixes, and deploy security patches.
• Experience performing secure code reviews and identifying security weaknesses in:
• Ability to work across frontend and backend application stacks.
• Understanding of APIs and web application architecture.

Familiarity with Ruby-based environments is helpful

Nice to Have Skills & Experience

• Knowledge of cloud environments such as AWS and/or GCP.
• Understanding of CI/CD pipelines and security automation.
• Exposure to DevOps practices and tooling.
• Experience with modern frontend frameworks such as:
  • TypeScript

Job Description

• Assess, prioritize, and remediate application security vulnerabilities across web applications.
• Collaborate with software engineers to implement secure coding standards and best practices.
• Address findings identified through vulnerability scans, penetration testing, and code reviews.
• Review and secure WordPress core functionality, custom themes, and third-party plugins.
• Evaluate vulnerable WordPress plugins, implement mitigations, apply patches, and recommend secure alternatives when necessary.
• Support PCI-DSS compliance initiatives, including requirements related to script integrity monitoring and payment page security.
• Monitor and remediate risks associated with malicious or unauthorized scripts on payment and checkout pages.
• Help establish repeatable security processes to prevent future vulnerabilities.

Compensation:

• $50/hr to $60/hr

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.