Full Stack PHP Developer (Security-focused)

About the role

We are seeking a skilled and security‑conscious Full Stack PHP Developer to join our engineering team. You will design, develop and maintain web applications that handle critical user data, ensuring security, performance and reliability are built‑in from day one.

Key responsibilities

• Design, develop and maintain scalable full‑stack web applications using PHP 8.x and frameworks such as Laravel or Symfony.
• Implement robust security measures including input validation, output encoding, authentication, authorisation, and encryption of data at rest and in transit.
• Conduct security‑focused code reviews, identify vulnerabilities and ensure compliance with OWASP Top 10 and relevant standards.
• Design and manage relational databases (MySQL/PostgreSQL) with strong data integrity, access controls and audit logging.
• Build and integrate secure RESTful APIs and third‑party services while handling sensitive credentials safely.
• Collaborate with backend and frontend teams to deliver secure, well‑tested features across the full stack.
• Monitor applications for anomalies, respond to security incidents and participate in threat‑modelling sessions.
• Maintain thorough documentation of systems, data flows and security decisions.

Required profile

• Minimum 2 years of professional experience in full‑stack PHP development.
• Proven experience building software that processes sensitive, personal or regulated user data.
• Strong security mindset with hands‑on experience applying OWASP best practices.
• Familiarity with compliance environments such as GDPR, HIPAA or similar frameworks.

Required skills

• PHP 8.x
• Laravel (or Symfony)
• MySQL / PostgreSQL
• HTML5, CSS3, JavaScript
• Vue.js or React
• Git version control
• CI/CD pipelines
• Linux/Unix environments
• Docker and Kubernetes
• AWS, GCP or Azure cloud platforms
• Redis, RabbitMQ or SQS
• OWASP security standards
• Encryption, secure session management