WordPress Security Engineer: AppSec, Cloud & Secure Coding

The Intersect Group; Atlanta (GA); On-site; USD 120,000 - 170,000; Full time

Job summary

The Intersect Group is seeking an experienced Application Security Engineer to identify and remediate vulnerabilities in web applications and infrastructure. You will work closely with development teams to review code, address security findings from scans and penetration tests, and implement secure coding practices across WordPress, cloud environments, and API integrations.

In this role, you will secure WordPress environments, cloud infrastructure, and custom API integrations, supporting the

Qualifications

• Proven experience securing WordPress websites, including plugin and theme analysis.
• Experience in remediating security vulnerabilities through penetration testing, scans, and code reviews.
• Ability to assess and secure cloud infrastructure within GCP and AWS environments.
• Knowledge of PCI DSS standards, particularly version 4.0.1 and associated vulnerabilities.
• Experience working with security tools such as vulnerability scanners and WAFs like Wordfence.
• Ability to collaborate with developers, review security findings, and implement fixes efficiently.

Responsibilities

• Assess and remediate application vulnerabilities across WordPress sites, custom code, and third-party packages.
• Review insecure code, advise on mitigations, and apply necessary patches or adjustments.
• Partner with developers to implement secure coding practices and validate vulnerabilities fixes.
• Maintain PCI DSS compliance for payment pages and address vulnerabilities specific to PCI standards.
• Monitor vulnerability scans, penetration tests, and code reviews; respond with timely remediations.
• Secure cloud environments, including GCP and AWS, by configuring protections against malicious activity and managing security controls.
• Maintain the organization’s Ruby API and assist with related security tasks; Python API experience is desirable.
• Support the security of CI/CD pipelines, infrastructure as code, and security keys.

Skills

WordPress security

Vulnerability remediation

Secure coding practices

Cloud security

PCI DSS knowledge

Tools

Vulnerability scanners

Wordfence

Job description

The Intersect Group is seeking an experienced Application Security Engineer to identify and remediate vulnerabilities in web applications and infrastructure. You will work closely with development teams to review code, address security findings from scans and penetration tests, and implement secure coding practices across WordPress, cloud environments, and API integrations.

In this role, you will secure WordPress environments, cloud infrastructure, and custom API integrations, supporting the