PHP Security QA Engineer

We are looking for an experienced PHP Security QA Engineer to test and secure PHP-based web applications. The ideal candidate will identify security vulnerabilities, test application functionality, perform penetration and security testing, and work closely with developers to resolve issues. The role requires strong knowledge of PHP applications, web security, API testing, and common vulnerabilities such as OWASP Top 10.

PHP Security QA Engineer

We are looking for a skilled PHP Security QA Engineer to help ensure the security, reliability, and quality of our PHP-based web applications and APIs.

Responsibilities

• Perform functional, regression, and security testing of PHP web applications.
• Identify and document security vulnerabilities and software defects.
• Test applications for common security issues, including SQL injection, XSS, CSRF, authentication, authorization, and session-management vulnerabilities.
• Perform API security and functionality testing.
• Review application behavior and identify potential security risks.
• Work closely with PHP developers to reproduce, investigate, and resolve issues.
• Conduct vulnerability assessments and basic penetration testing.
• Create detailed test cases, test reports, and bug reports.
• Perform regression testing after security fixes and new releases.
• Help improve QA and security testing processes.

Requirements

• Experience in QA/testing of PHP-based web applications.
• Good understanding of web application security and the OWASP Top 10.
• Knowledge of PHP, MySQL, REST APIs, HTML, JavaScript, and HTTP.
• Experience with security testing and vulnerability assessment.
• Ability to analyze bugs, security issues, logs, and application behavior.
• Familiarity with tools such as Burp Suite, OWASP ZAP, Postman, or similar tools.
• Experience with Git and bug-tracking systems.
• Strong attention to detail and problem-solving skills.

Preferred

• Experience with automated testing.
• Experience with Linux environments.
• Knowledge of secure PHP coding practices.
• Experience testing authentication, payment systems, and third-party APIs.
• Relevant cybersecurity or QA certifications are a plus.

What We Offer

• Long-term project and stable cooperation.
• Competitive compensation based on experience.
• Flexible working arrangements.
• Opportunity to work on challenging PHP and cybersecurity projects.