WordPress and Cloudflare Security Specialist

WordPress and Cloudflare Security Specialist Join to apply for the WordPress and Cloudflare Security Specialist role at Work for Impact Our client is a woman-owned and mission-driven cybersecurity company, working to advance the careers of and create job opportunities for women, people of color, LGBTQIA+, and other underrepresented folks across the globe, through their work with small and socially conscious organizations. They are a Public Benefit Corporation, a Certified B Corp, and a 1% for the Planet member. The team is now launching an innovative Work Integration Social Enterprise (WISE) that trains women in cybersecurity skills and provides real-world experience through client projects. This is a unique opportunity to build something impactful from the ground up. They are seeking a WordPress & Cloudflare Security Specialist to implement and manage Cloudflare solutions while protecting their clients' websites from evolving threats and maintaining compliance and optimal performance. You will thrive in this role if you are meticulous and detail-oriented, stay ahead of emerging security threats, and excel at educating non-technical clients about security best practices without overwhelming them. You'll work closely with small business owners, marketing teams, and the Cybersecurity & IT Support Specialist to ensure comprehensive security across all digital platforms. Job Responsibilities Implement and manage Cloudflare for client websites, including initial setup and configuration Handle DNS management and domain name migrations to Cloudflare Configure and optimize Cloudflare security features (WAF, Rate Limiting, Bot Management) Monitor and implement SSL/TLS certificates and ensure proper configuration Configure Cloudflare Page Rules and other features Troubleshoot Cloudflare-related issues and provide timely resolution WordPress Security Conduct WordPress security audits using comprehensive checklists covering core, plugins, themes, and server configurations Implement and maintain WordPress security roadmaps tailored to each client's risk profile and business needs Perform security assessments covering authentication, authorization, API endpoints, headers, and vulnerability detection Remediate security findings including malware removal, plugin/theme updates, and security hardening Configure and manage security plugins and WAF implementations Implement security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy) Manage plugin and theme security including vetting, updates, and replacing insecure components Configure secure file permissions, disable unnecessary services, and restrict access to sensitive endpoints Website Administration & Support Perform website migrations and ensure seamless transitions Troubleshoot and resolve website security issues Provide ongoing support for client websites Deliver responsive support for urgent security issues and emergencies Create and maintain security documentation and standard operating procedures Required Skills 3+ years hands-on experience with WordPress security, hardening, and vulnerability remediation Proven expertise implementing and managing Cloudflare services, including DNS management and security features Experience with domain migrations and DNS configuration Strong knowledge of WordPress core architecture and common vulnerabilities (OWASP Top 10) Proficiency with security plugins and WAF configuration Experience implementing security headers Knowledge of malware detection, removal, and backup/disaster recovery solutions Understanding of privacy compliance requirements for websites Ability to explain security concepts clearly to non-technical business owners Strong documentation skills and attention to detail Excellent communication skills and ability to provide timely support Preferred Skills Advanced experience with Cloudflare Enterprise security features and Workers Experience with Cloudflare for Teams or Zero Trust implementation Basic PHP knowledge for security code reviews Certifications: CEH, GWAPT, or WordPress security certifications Experience with penetration testing tools and methodologies Experience providing ongoing maintenance and support for multiple clients Additional Information Candidate must be available to work between the hours of 6am-5pm pacific, ideally 6am-9am pacific and/or 12pm-5pm pacific Candidates who are aligned with advocacies for women's empowerment and rights are highly preferred Role includes a mix of project-based work and ongoing support work Ability to respond to urgent security issues outside of regular hours may be needed occasionally Hours: Project-based with ongoing support as needed Seniority level Associate Employment type Part-time Job function Information Technology, Engineering, and Project Management Staffing and Recruiting #J-18808-Ljbffr