PHP Security & Legacy Application SME (Remote)

Key Responsibilities

• Conduct comprehensive assessments of legacy PHP applications and associated infrastructure.
• Identify, analyze, and remediate PHP application security vulnerabilities.
• Perform security impact analysis and risk assessments for existing applications.
• Recommend secure coding practices and remediation approaches for identified issues.
• Upgrade and modernize legacy PHP applications where applicable.
• Resolve compatibility issues arising from PHP version upgrades and dependency updates.
• Assess third-party libraries, frameworks, and package dependencies for security and supportability.
• Implement security patches, code fixes, and configuration changes.
• Review application architecture and recommend improvements for maintainability and security.
• Collaborate with development, infrastructure, and security teams to execute remediation plans.
• Develop technical documentation detailing findings, recommendations, and implemented solutions.
• Support knowledge transfer sessions with internal engineering teams.

Required Qualifications

• 8+ years of hands-on PHP development experience.
• Strong expertise in legacy PHP applications, including PHP 5.x, PHP 7.x, and migration to newer versions.
• Proven experience identifying and fixing common PHP security vulnerabilities such as:
• SQL Injection
• Cross-Site Scripting (XSS)
• Cross-Site Request Forgery (CSRF)
• Remote Code Execution (RCE)
• Authentication and Session Management Issues
• Insecure File Upload Vulnerabilities
• Experience performing application security reviews and vulnerability remediation.
• Strong understanding of OWASP Top 10 security risks and secure coding principles.
• Experience with PHP upgrades, dependency management, Composer, and package compatibility analysis.
• Familiarity with web servers such as Apache and Nginx.
• Strong debugging, troubleshooting, and performance optimization skills.
• Experience working independently in consulting or advisory engagements.