Remote Security & Platform Engineer (WordPress)

Dealer Alchemist LLC; United States; On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Remote — work from anywhere in the U.S

Unlimited PTO

401(k) with employer matching

Comprehensive healthcare — medical,  d

Job summary

Dealer Alchemist is seeking an Information Security & Platform Engineer to help secure our WordPress-based advertising platform. You’ll own vulnerability management, patching, and hardening across Linux servers, WordPress core, plugins, and dependencies, working with senior engineers on incident response and SOC 2 readiness.

This hands-on role focuses on security operations: running scans, triage, remediation, and turning findings into actionable tickets.

Qualifications

• 1–3 years of professional experience in software development, systems administration, or IT with a security focus.
• Hands-on WordPress and PHP experience; able to read plugin and theme code, trace a bug, and write a fix.
• Solid security fundamentals: OWASP Top 10, authentication/authorization, encryption and TLS basics, and common web attack vectors.
• Comfortable on the Linux command line: file system, process management, and log analysis.
• Scripting ability in Bash and/or Python.
• A working understanding of web application architecture — HTTP, DNS, TLS, APIs, and how a request reaches your code.
• Working knowledge of MySQL: writing queries and debugging data issues.
• Strong written communication — security work is documentation-heavy.
• Genuine curiosity and a methodical approach; root-cause focus.
• Must reside in the U.S. and be authorized to work without sponsorship.

Responsibilities

• Vulnerability management: run scans, triage findings, and drive remediation with code owners.
• WordPress and dependency security: patch cadence for core, plugins, themes, and libraries; identify risky dependencies.
• Apply and maintain hardening baselines across Linux servers, web server configuration, and application settings.
• Help implement security controls: access reviews, secrets management, security logging and TLS hygiene.
• Participate in incident response: monitoring, evidence gathering, and lessons‑learned with senior engineers.
• Support SOC 2 compliance: evidence collection and policy support.
• Track vulnerabilities and translate threats into prioritized tickets.
• Diagnose WordPress, PHP, and MySQL issues with development/support teams.
• Assist releases, deployments, and client site launches using internal automation.
• Administer Ubuntu/Debian servers: patching, nginx configuration, log analysis, maintenance.
• Manage DNS records and SSL/TLS certificates across client environments.
• Build small automations to reduce manual security/ops overhead.

Skills

WordPress & PHP experience

Linux command line

Bash/Python scripting

MySQL queries

Cloud familiarity (AWS/GCP)

CI/CD / GitHub Actions

Tools

Nessus

OpenVAS

Trivy

WPScan

GitHub Actions

nginx

Job description

Dealer Alchemist is seeking an Information Security & Platform Engineer to help secure our WordPress-based advertising platform. You’ll own vulnerability management, patching, and hardening across Linux servers, WordPress core, plugins, and dependencies, working with senior engineers on incident response and SOC 2 readiness.

This hands-on role focuses on security operations: running scans, triage, remediation, and turning findings into actionable tickets.