Security Analyst at Defiant

Job Description
Defiant, the company behind Wordfence and a global leader in WordPress security, is looking for a Security Analyst (Contract) to join their fully remote team. The company protects over 5 million websites and is known for its supportive, fast-moving, and highly trusted work culture.
This is a role for someone who thrives in a technical environment, communicates clearly, and enjoys solving complex security problems all from the comfort of a home office.
About the Role
As a Security Analyst, you’ll help customers recover compromised WordPress websites, investigate intrusions, remove malware, and dig deep into vulnerabilities. You’ll also gather evidence to improve threat detection and work with the Threat Intelligence team on malware signatures and vulnerability research.
In slower periods, you’ll review vulnerability reports from the bug bounty program, reproduce issues, write findings, and recommend fixes or firewall rules.
What You’ll Do
- Repair hacked WordPress sites and remove malicious code
- Investigate intrusions, gather IOCs, and analyze logs
- Collaborate with developers, threat researchers, and support teams
- Triage vulnerability reports and reproduce bugs in test environments
-
Review patches, propose bounties, and ensure fixes are complete
What You Need
- Hands-on WordPress experience
- Strong understanding of plugin/theme vulnerabilities & WordPress hooks
- Linux server administration and MySQL experience
- 2+ years of website intrusion remediation
- Ability to write/read PHP, JavaScript, cron jobs & regular expressions
- Experience with tools like BURP Suite, grep, and proxy/debuggers
-
Excellent written communication (critical for remote work)
Certifications in penetration testing or forensics are a major plus.
Work Schedule & Pay
Available shifts (Remote, Worldwide):
- Weekdays: Mon–Fri, 9 AM–5 PM ET (40 hrs/wk)
- Weekends: Sat–Sun, 11 AM–7 PM ET (16 hrs/wk)
Contract rate: $35+ per hour, depending on experience.
Why Work With Defiant?
- Fully remote for over 8 years
- No micromanagement; high trust, high autonomy
- A supportive, humorous, and highly capable team
-
A company that values work-life balance and diversity
If you love tackling security challenges, enjoy helping users recover their sites, and want a role where your contributions genuinely matter, this contract position with Defiant might be the perfect fit. Apply now and join a team dedicated to making the web safer—one site at a time.