PHP Developer

PHP Developer – Mend / Application SecurityLocation: Covington, KY — HybridDuration: Long-Term ContractWork Arrangement: W2 OnlyWe are looking for a PHP Developer with strong application security and Mend vulnerability scanning experience to support legacy application maintenance and modernization initiatives.What You’ll DoDevelop, maintain, enhance, and troubleshoot enterprise PHP applications.Perform vulnerability assessment and remediation using Mend and other security scanning tools.Help reduce security exposure across legacy PHP applications.Support modernization efforts migrating PHP/jQuery functionality toward Angular and Node.js solutions.Develop and consume REST APIs and integrate applications with enterprise systems.Participate in automated testing, code reviews, Agile ceremonies, and technical design discussions.Collaborate with developers, architects, and business partners to deliver scalable and secure solutions.Support CI/CD and cloud-based application deployments.Required Qualifications5+ years of PHP development experience.Hands-on experience with PHP 8 and legacy PHP applications.Strong experience with Mend.io or comparable application security/vulnerability remediation.Experience identifying and resolving OWASP Top 10 vulnerabilities.Experience with Angular, TypeScript, JavaScript, Node.js, HTML5, and CSS3.Experience modernizing or migrating legacy applications.Strong REST API development/integration experience.Experience with relational databases, preferably MySQL.Experience with automated testing and TDD practices.Strong Git/source-control experience.Nice to HaveAngular 17+ and modern Angular features.CodeIgniter or other legacy PHP frameworks.Mend, CodeQL, or SonarQube.Docker, Kubernetes, and Helm.Azure or AWS cloud experience.CI/CD experience.OAuth, OIDC, or SAML.GitHub Copilot experience.Experience deploying applications independently to Azure.Interested? Please share your updated resume on rolly@hclglobal.com and a brief summary of your experience with PHP, Mend/application security, and legacy application modernization.Any work authorization is accepted.