Software Engineer Moodle (Security & Application Development)

Job Description
We are looking for a skilled Software Engineer with expertise in PHP development, Moodle LMS, website security, and vulnerability remediation. The candidate will be primarily responsible for identifying, analysing, and resolving security vulnerabilities in the LMS Portal of the Department, ensuring secure application development, server hardening, and reliable platform maintenance. Roles & Responsibilities 1. Website Security & Vulnerability Remediation (Primary Responsibility)
- Analyse VAPT reports, identify security weaknesses, and implement appropriate remediation.
- Identify and fix OWASP Top 10 vulnerabilities, including SQL Injection, XSS, CSRF, OS Command Injection, and improper input validation.
- Secure authentication mechanisms, OTP, MFA, APIs, access controls, and session management.
- Address vulnerabilities related to file uploads, payment manipulation, data exposure, encryption, and unauthorized access.
- Implement security headers, CSP, secure cookies, SSL/TLS, and appropriate HTTP security configurations.
- Secure application files, directories, APIs, and sensitive configuration information.
- Identify and update vulnerable JavaScript libraries and third-party dependencies.
- Conduct security testing and coordinate with auditors for vulnerability closure. 2. Server Security & Administration
- Perform Linux server administration and security hardening.
- Configure and secure Apache/Nginx, PHP, databases, and SSL/TLS.
- Address server information disclosure, directory listing, debug mode, and configuration weaknesses.




- Monitor server logs, apply security patches, and troubleshoot server-level issues. 3. Moodle Development & Maintenance
- Develop, customize, and maintain Moodle plugins, themes, and functionalities.
- Manage Moodle (4.5x) upgrades, migrations, integrations, and security patches.
- Troubleshoot application issues and optimize LMS performance.
- Implement secure coding practices during application development. 4. Documentation & Coordination
- Maintain vulnerability remediation reports and technical documentation.
- Coordinate with security auditors and technical teams for security assessments and compliance. Technical Skills
- Security: OWASP Top 10, VAPT analysis, vulnerability remediation, secure coding, authentication, session management, API security, encryption, CSP, and security headers.
- Backend: PHP (OOP), MySQL/MariaDB, Moodle architecture, APIs, and plugin development.
- Frontend: HTML5, CSS3, JavaScript, and JavaScript dependency management.
- Server: Linux, Apache/Nginx, SSL/TLS, server hardening, and log analysis.
- Tools: Git, Composer, OWASP ZAP, and Burp Suite. Preferred Skills & Qualifications
- B.
Tech (CS/IT) / MCA / M.
Tech (CS) / M.
Sc (CS).
- 25 years of relevant experience in PHP/Moodle development, application security, or vulnerability remediation.
- Hands-on experience in analysing and resolving VAPT findings is highly preferred.
- Experience in government websites or enterprise application security will be an added advantage.
- Solid problem-solving, analytical, communication, and documentation skills.

📌 Software Engineer (New Delhi)
🏢 National Institute for Smart Government (NISG)
📍 New Delhi