WordPress Security Audit & Hardening Specialist (US-based - Remote)
WordPress Security Audit & Hardening Specialist (Project-Based ā Ongoing)
The Language Doctors (TLD)
is seeking a U.S.-based specialist to audit, secure, and harden three existing WordPress websites
.
This role begins as a focused project engagement
, with the opportunity for ongoing maintenance and security support based on performance and fit.
Objective
ā¢ Assess the current state of 3 live WordPress sites, eliminate security risks, and establish a clean, hardened, and well-documented baseline.
Scope of Work
ā¢ Conduct full security audit (plugins, themes, users, APIs, hosting, Cloudflare)
ā¢ Identify vulnerabilities, misconfigurations, and access risks
ā¢ Remove malware, backdoors, or suspicious code (if present)
ā¢ Secure admin access (least privilege, MFA where applicable)
ā¢ Harden WordPress (core, database, file system, endpoints)
ā¢ Configure Cloudflare (WAF, SSL/TLS, DNS protections)
ā¢ Validate or implement secure Stripe integration (tokenized, no card storage)
ā¢ Establish:
ā¢ Backup and restore process
ā¢ Update/patching approach
ā¢ Basic monitoring/logging
Deliverables
ā¢ Written Security Audit Report (findings + severity)
ā¢ Summary of issues remediated vs. remaining risks
ā¢ Hardened and secured live environment
ā¢ Clear documentation of setup and recommendations
Ongoing Support (Post-Project)
Opportunity to continue supporting TLD on an as-needed basis, including:
ā¢ Security monitoring and periodic audits
ā¢ Plugin/core updates and patching
ā¢ Incident response (if needed)
ā¢ Minor improvements and optimizations
Requirements
ā¢ Proven experience securing WordPress sites (not just building them)
ā¢ Ability to detect and remediate compromised environments
ā¢ Strong knowledge of OWASP Top 10 and web security best practices
ā¢ Hands-on experience with:
ā¢ Cloudflare (WAF, DNS, SSL)
ā¢ WordPress security hardening
ā¢ Stripe API integrations (preferred)
The Language Doctors, Inc. is an equal opportunity employer committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
Visit our website at www.thelanguagedoctors.org to learn more about us.
Apply tot his job
Apply To this Job
The Language Doctors (TLD)
is seeking a U.S.-based specialist to audit, secure, and harden three existing WordPress websites
.
This role begins as a focused project engagement
, with the opportunity for ongoing maintenance and security support based on performance and fit.
Objective
ā¢ Assess the current state of 3 live WordPress sites, eliminate security risks, and establish a clean, hardened, and well-documented baseline.
Scope of Work
ā¢ Conduct full security audit (plugins, themes, users, APIs, hosting, Cloudflare)
ā¢ Identify vulnerabilities, misconfigurations, and access risks
ā¢ Remove malware, backdoors, or suspicious code (if present)
ā¢ Secure admin access (least privilege, MFA where applicable)
ā¢ Harden WordPress (core, database, file system, endpoints)
ā¢ Configure Cloudflare (WAF, SSL/TLS, DNS protections)
ā¢ Validate or implement secure Stripe integration (tokenized, no card storage)
ā¢ Establish:
ā¢ Backup and restore process
ā¢ Update/patching approach
ā¢ Basic monitoring/logging
Deliverables
ā¢ Written Security Audit Report (findings + severity)
ā¢ Summary of issues remediated vs. remaining risks
ā¢ Hardened and secured live environment
ā¢ Clear documentation of setup and recommendations
Ongoing Support (Post-Project)
Opportunity to continue supporting TLD on an as-needed basis, including:
ā¢ Security monitoring and periodic audits
ā¢ Plugin/core updates and patching
ā¢ Incident response (if needed)
ā¢ Minor improvements and optimizations
Requirements
ā¢ Proven experience securing WordPress sites (not just building them)
ā¢ Ability to detect and remediate compromised environments
ā¢ Strong knowledge of OWASP Top 10 and web security best practices
ā¢ Hands-on experience with:
ā¢ Cloudflare (WAF, DNS, SSL)
ā¢ WordPress security hardening
ā¢ Stripe API integrations (preferred)
The Language Doctors, Inc. is an equal opportunity employer committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
Visit our website at www.thelanguagedoctors.org to learn more about us.
Apply tot his job
Apply To this Job