Application Security Engineer

Position: Application Security Engineer Location: Atlanta, GA (Midtown) – Onsite 5 days/week Duration: 6+ Month Contract (Potential Extension) Start: ASAP Interview Process: 1 and done via MS Teams Summary: This role is a blend of software development and application security. The team is modernizing and securing existing web applications built with WordPress, PHP, and JavaScript, while moving toward a more modern JavaScript-based frontend. They're looking for someone who can identify security vulnerabilities, implement the code fixes, and own the remediation process end-to-end. Candidates can come from either a development or application security background, but should be comfortable working in both areas. Experience with WordPress security, frontend technologies, AWS/GCP, and ideally Ruby is a plus. Required Qualifications Experience developing and securing web applications using WordPress, PHP, and JavaScript.Hands-on application security experience, including identifying and remediating vulnerabilities discovered through penetration testing, vulnerability scans, and code reviews.Strong understanding of secure coding practices, application security principles, and PCI-DSS compliance requirements.Experience reviewing, modifying, and securing WordPress core, custom themes, and third-party plugins.Ability to perform secure code reviews and remediate vulnerabilities across frontend and backend applications, APIs, and integrations.Familiarity with modern JavaScript frameworks and cloud environments (AWS/GCP preferred). Day-to-Day Responsibilities Review and remediate application security vulnerabilities identified through security scans, penetration testing, and code reviews.Secure and enhance WordPress applications, including core functionality, custom themes, and third-party plugins.Perform secure code reviews and implement fixes across PHP, JavaScript, APIs, and modern frontend technologies such as React, Angular, and TypeScript.Partner with development teams to improve secure coding practices and strengthen overall application security.Support PCI-DSS compliance initiatives, payment page security, and the establishment of scalable security processes to prevent future vulnerabilities. Contract/Contract-to-Hire Roles: Compensation: $50/hr to $60/hr. Exact compensation may vary based on several factors, including skills, experience, and education. Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.