Information Security Engineer – Platform

🕒 July 31

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🏗️ Platform Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dealer Alchemist

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2015

🚘 Automotive

📣 Marketing

🤝 B2B

Automotive • Marketing • B2B

Dealer Alchemist is a digital marketing and technology company that builds AI-driven websites and runs advertising and SEO programs specifically for car dealerships, dealer groups, and OEMs. Their offerings include mobile-first, inventory-aware websites, AI-optimized ad campaigns across Google/Bing/Meta/OTT, SEO focused on high-intent and inventory-based content, lead conversion tools, and soft credit pull capabilities — all intended to increase lead quality, calls, and vehicle sales. They position themselves as a B2B partner delivering scalable, certified solutions for individual dealerships, dealer groups, and OEM programs.

📋 Description

• Security Vulnerability management — run scans, interpret results, triage findings by real-world exploitability, and drive remediation to closure with the engineers who own the code. • WordPress and dependency security — own the patch cadence for core, plugins, themes, and third-party libraries; identify risky or abandoned dependencies and make the case for replacing them. • Apply and maintain hardening baselines across Linux servers, web server configuration, and application settings. • Help implement security controls: access reviews, secrets management, security logging and alerting, and TLS / certificate hygiene. • Perform security-focused code review on PHP and JavaScript changes, and help triage findings from automated scanning in the pipeline. • Participate in incident response — monitoring, triage, evidence gathering, documentation, and the lessons-learned process, working alongside the senior engineers who lead it. • Support SOC 2 compliance — evidence collection, control documentation, and policy support. • Track vulnerabilities and threats relevant to our stack, and translate them into prioritized, actionable tickets. • Write and review PHP and JavaScript for the WordPress platform, with a focus on security fixes, hardening, and remediation work. • Diagnose and resolve WordPress, PHP, and MySQL issues alongside the development and support teams. • Assist with releases, deployments, and client site launches using internal automation scripts. • Administer Ubuntu / Debian Linux servers: patching, monitoring, nginx configuration, log analysis, and routine maintenance. • Work with DNS records, domain configuration, and SSL / TLS certificates across client site environments. • Build small automations and scripts that reduce manual security and operations overhead.

🎯 Requirements

• 1–3 years of professional experience in software development, systems administration, or IT with a demonstrated security focus. • Strong internship, lab, home-lab, or CTF work counts toward this. • Hands-on WordPress and PHP experience — you can read plugin and theme code, trace a bug through it, and write a fix. This is a hard requirement, not a nice-to-have. • Solid security fundamentals: OWASP Top 10, authentication and authorization concepts, encryption and TLS basics, and common web attack vectors. • Comfortable on the Linux command line: file system, process management, and log analysis. • Scripting ability in Bash and / or Python. • A working understanding of web application architecture — HTTP, DNS, TLS, APIs, and how a request actually reaches your code. • Working knowledge of MySQL: writing queries and debugging data issues. • Strong written communication — security work is documentation-heavy, and clear writing is a core part of the job. • Genuine curiosity and a methodical approach. We would rather hire someone who digs until they understand the root cause than someone who already knows every tool. • Must reside in the U.S. and be authorized to work without sponsorship.

🏖️ Benefits

• Remote — work from anywhere in the U.S. • Unlimited PTO — performance-based flexibility • 401(k) with employer matching • Comprehensive healthcare — medical, dental, and vision • Paid professional development