The Language Doctors

Security Engineer

• Assess the current state of 3 live WordPress sites, eliminate security risks, and establish a clean, hardened, and well-documented baseline.
• Conduct full security audit (plugins, themes, users, APIs, hosting, Cloudflare)
• Identify vulnerabilities, misconfigurations, and access risks
• Remove malware, backdoors, or suspicious code (if present)
• Secure admin access (least privilege, MFA where applicable)
• Harden WordPress (core, database, file system, endpoints)
• Configure Cloudflare (WAF, SSL/TLS, DNS protections)
• Validate or implement secure Stripe integration (tokenized, no card storage)
• Establish: Backup and restore process
• Update/patching approach
• Basic monitoring/logging
• Deliverables Written Security Audit Report (findings + severity)
• Summary of issues remediated vs. remaining risks
• Hardened and secured live environment
• Clear documentation of setup and recommendations

WordPress Security Audit – Hardening Specialist