Website Security Engineer

Job Summary

Proactively managing security functions for WordPress-based websites, the contract Website Security Engineer will ensure the technical infrastructure is resilient against evolving threats while working remotely.

Key responsibilities

• Monitor server logs, Web Application Firewalls (WAF), and malware alerts to identify and neutralize threats
• Act as the primary contact during website product security incidents, driving containment and remediation efforts
• Develop and enforce a "Security Gold Standard" checklist for new site launches and third-party integrations

Required qualifications

• Minimum 2 years of experience in website security best practices
• Proven experience in proactive threat hunting and maintaining Indicators of Compromise (IoCs)
• Experience leading security incident response, including containment and post-mortem review
• Familiarity with digital compliance standards such as GDPR and CPRA
• Relevant certifications such as CEH, Security+, OSCP, or SSCP are highly desirable