WordPress Security Engineer - Frontend & API

Insight Global; Atlanta (GA); On-site; USD 68,880 - 82,656; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA

FSA

DCFSA account options

401k with employer matching

Paid time off

Job summary

Insight Global is seeking an Application Security Engineer to join our Atlanta-based team and improve security across WordPress-based applications and frontend/API stacks.

You will collaborate with development teams to enforce secure coding standards, perform secure code reviews, and address findings from vulnerability scans, pen tests, and code reviews. Experience with AWS/GCP and modern frontend frameworks is valued.

Qualifications

• Experience developing and maintaining web applications using WordPress, PHP, and JavaScript.
• Hands-on experience remediating security vulnerabilities within web or frontend applications.
• Experience working with PCI-DSS compliance requirements, especially payment page security.
• Strong understanding of secure coding principles and application security best practices.
• Experience addressing vulnerabilities identified through: Penetration testing, Vulnerability scanning tools, Secure code reviews.

Responsibilities

• Assess, prioritize, and remediate application security vulnerabilities across web applications.
• Review, analyze, and remediate insecure code within WordPress, PHP, JavaScript, and related technologies.
• Collaborate with software engineers to implement secure coding standards and best practices.
• Address findings identified through vulnerability scans, penetration testing, and code reviews.
• Review and secure WordPress core functionality, custom themes, and third-party plugins.
• Evaluate vulnerable WordPress plugins, implement mitigations, apply patches, and recommend secure alternatives when necessary.
• Perform secure code reviews and identify vulnerabilities within PHP, JavaScript, and API integrations.
• Support PCI-DSS compliance initiatives, including requirements related to script integrity monitoring and payment page security.
• Monitor and remediate risks associated with malicious or unauthorized scripts on payment and checkout pages.
• Help establish repeatable security processes to prevent future vulnerabilities.

Skills

WordPress

PHP

JavaScript

secure coding principles

PCI-DSS

vulnerability remediation

security scans

secure code reviews

WordPress Core

Plugins

React

Angular

TypeScript

AWS

GCP

CI/CD security

DevOps tooling

Job description

Insight Global is seeking an Application Security Engineer to join our Atlanta-based team and improve security across WordPress-based applications and frontend/API stacks.

You will collaborate with development teams to enforce secure coding standards, perform secure code reviews, and address findings from vulnerability scans, pen tests, and code reviews. Experience with AWS/GCP and modern frontend frameworks is valued.