PHP Security & Legacy Application SME (Remote)

Key Responsibilities
* Conduct comprehensive assessments of legacy PHP applications and associated infrastructure.
* Identify analyze and remediate PHP application security vulnerabilities.
* Perform security impact analysis and risk assessments for existing applications.
* Recommend secure coding practices and remediation approaches for identified issues.
* Upgrade and modernize legacy PHP applications where applicable.
* Resolve compatibility issues arising from PHP version upgrades and dependency updates.
* Assess third-party libraries frameworks and package dependencies for security and supportability.
* Implement security patches code fixes and configuration changes.
* Review application architecture and recommend improvements for maintainability and security.
* Collaborate with development infrastructure and security teams to execute remediation plans.
* Develop technical documentation detailing findings recommendations and implemented solutions.
* Support knowledge transfer sessions with internal engineering teams.
Required Qualifications
* 8 years of hands-on PHP development experience.
* Strong expertise in legacy PHP applications including PHP 5.x PHP 7.x and migration to newer versions.
* Proven experience identifying and fixing common PHP security vulnerabilities such as:
o SQL Injection
o Cross-Site Scripting (XSS)
o Cross-Site Request Forgery (CSRF)
o Remote Code Execution (RCE)
o Authentication and Session Management Issues
o Insecure File Upload Vulnerabilities
* Experience performing application security reviews and vulnerability remediation.
* Strong understanding of OWASP Top 10 security risks and secure coding principles.
* Experience with PHP upgrades dependency management Composer and package compatibility analysis.
* Familiarity with web servers such as Apache and Nginx.
* Strong debugging troubleshooting and performance optimization skills.
* Experience working independently in consulting or advisory engagements.