New York Holdings
Web Security Consultant / Consultant(e) en sécurité web
Montréal, QC
Sponsorship not specifiedDetected 7 days ago
JavaScriptAWSAzureCI/CDCybersecurityPenetration TestingComplianceValuationFirewallWordPressWebflowShopifyCommunicationCollaboration
About the role
- (VERSION EN FRANÇAIS PLUS BAS) The Role We're looking for a Web Security Consultant who can help us build secure websites from the ground up. Security isn't something that should be addressed at the end of a project—it's something that should be considered throughout the entire development lifecycle. We're looking for someone who can help us establish best
- practices, identify potential risks before they become problems, and create repeatable standards that every project can follow. In this role, you'll work closely with our development team to review websites and web applications, ensure they meet current security standards, and build practical processes that improve consistency across every project. Our web
Responsibilities
- Your primary responsibility will be helping the studio build and maintain secure, reliable web solutions.
Requirements
- You likely have experience with many of the following: Web application security principles and secure development practices.
- Familiarity with the OWASP Top 10 and common web application vulnerabilities.
- Experience reviewing websites built with modern CMS platforms and JavaScript frameworks.
- Excellent communication skills and the ability to explain technical concepts to both technical and non-technical stakeholders.
- Deep expertise in WordPress security, including hardening, plugin vulnerability management, hosting security, and performance/security best practices.
- Most of our web projects are built on WordPress, making security expertise in that ecosystem especially valuable.
Nice to have
- Security isn't something that should be addressed at the end of a project-it's something that should be considered throughout the entire development lifecycle.
- Because of this, strong experience securing WordPress websites, plugins, themes, hosting environments, and deployment workflows is a significant advantage.
- Reviewing websites and web applications to ensure they follow current web security best practices.
- Conducting security reviews for WordPress websites and other web applications, identifying platform-specific risks and recommending practical remediation strategies.
- Identifying security vulnerabilities and recommending practical remediation strategies.
- Performing security reviews throughout the development lifecycle rather than only before launch.
- Creating internal documentation and security best practices for developers and project teams.
- Advising developers on secure coding practices and common web application vulnerabilities.
Skills
- Our web environment is primarily built on WordPress, alongside other modern web technologies.
Company info
- Developing a standardized security checklist that becomes part of every new website project.
- Internal security documentation and checklists become part of the agency's standard workflow.
Apply directly at New York Holdings →Create a free account for alerts like thisView New York Holdings immigration profile
This listing is sourced directly from New York Holdings's careers page and normalized into a canonical job model.