[Hiring] WordPress Security Developer (Anti-Spam Specialist) @The Blond HR

Role Description

We manage a UK based prescription drug e-commerce site built on WordPress. For over a decade, the site has been flooded with spam user registrations despite using multiple plugins (mobile verification, math challenges, CAPTCHA, etc.). Spam accounts continue to bypass these measures. We need a developer who can think like an attacker, identify the loopholes, and implement a robust, long-term solution.

• Audit the current WordPress registration and login flows, including all security plugins and custom code.
• Identify how bots are circumventing existing protections (e.g., API abuse, headless browsers, plugin vulnerabilities).
• Develop and implement advanced anti-spam measures tailored to the site's architecture (e.g., custom challenges, behavior analysis, honeypots, rate limiting, or integration with third-party services like Cloudflare Turnstile).
• Ensure the solution is lightweight, user-friendly for genuine customers, and maintainable.
• Provide documentation and a brief hand-off to the client.

Qualifications

• Proven experience with WordPress security, specifically combating spam registrations and bot attacks.
• Strong PHP and WordPress development skills (themes, plugins, hooks, REST API).
• Familiarity with modern anti-spam techniques (CAPTCHA variants, JavaScript challenges, IP analysis, browser fingerprinting, etc.).
• Ability to reverse engineer how bots work and test your own solutions.
• Portfolio of similar projects - please include links or descriptions of past work where you successfully reduced spam or secured a WordPress site.
• Excellent communication in English (written and spoken).

Requirements

• Nice to Have(s):
• Experience with e-commerce platforms (WooCommerce) and membership sites.
• Knowledge of server-level security (e.g., fail2ban, ModSecurity) and CDN configurations.
• Contributions to WordPress core or security plugins.

Benefits

• 100% remote - work from anywhere in your timezone.
• Flexible hours - focus on delivery, not clock watching.
• Direct collaboration with the client - no middlemen, no bureaucracy.
• Impactful work - solve a decade-old problem that actually matters to the business.
• Potential for ongoing work - if results are strong, there may be additional security projects.

Company Description

• 🚀 New Business Setup: HR operations, talent strategy, culture building
• ⚡ Staffing Excellence: Tech recruitment, process optimization, digital transformation
• 🎯 Career Coaching: Next-gen professional development, leadership training
• 💡 Specialized: TRCP-certified, scaled 300+ tech hires, 96% success rate