PHP Security & Legacy Application SME (Remote)
Key Responsibilities
- Conduct comprehensive assessments of legacy PHP applications and associated infrastructure.
- Identify, analyze, and remediate PHP application security vulnerabilities.
- Perform security impact analysis and risk assessments for existing applications.
- Recommend secure coding practices and remediation approaches for identified issues.
- Upgrade and modernize legacy PHP applications where applicable.
- Resolve compatibility issues arising from PHP version upgrades and dependency updates.
- Assess third-party libraries, frameworks, and package dependencies for security and supportability.
- Implement security patches, code fixes, and configuration changes.
- Review application architecture and recommend improvements for maintainability and security.
- Collaborate with development, infrastructure, and security teams to execute remediation plans.
- Develop technical documentation detailing findings, recommendations, and implemented solutions.
- Support knowledge transfer sessions with internal engineering teams.
Required Qualifications
- 8+ years of hands-on PHP development experience.
- Strong expertise in legacy PHP applications, including PHP 5.x, PHP 7.x, and migration to newer versions.
- Proven experience identifying and fixing common PHP security vulnerabilities such as:
o SQL Injection o Cross-Site Scripting (XSS) o Cross-Site Request Forgery (CSRF) o Remote Code Execution (RCE) o Authentication and Session Management Issues o Insecure File Upload Vulnerabilities
- Experience performing application security reviews and vulnerability remediation.
- Strong understanding of OWASP Top 10 security risks and secure coding principles.
- Experience with PHP upgrades, dependency management, Composer, and package compatibility analysis.
- Familiarity with web servers such as Apache and Nginx.
- Strong debugging, troubleshooting, and performance optimization skills.
- Experience working independently in consulting or advisory engagements.