E Commerce Cybersecurity // Shopify

Shopify & E-Commerce Security Specialist Store Audit & Hardening We're a fast-scaling DTC supplement brand running a subscription-first Shopify store across multiple territories (AU, US, UK, CA). We're looking for an experienced security specialist to conduct a thorough audit of our store and surrounding web infrastructure, identify vulnerabilities and discrepancies, and give us a clear, prioritized plan to tighten everything up. What we need: A full security analysis of our Shopify store, theme, and connected apps Review of installed third-party apps and their permissions/data access Assessment of checkout, customer data handling, and PII/payment security Account access and admin permission review (staff accounts, 2FA, roles) DNS, domain, and email authentication review (SPF, DKIM, DMARC) Identification of any suspicious activity, unauthorized access, or anomalies A detailed written report with findings ranked by severity, plus concrete remediation steps we can action You should have: Proven experience securing Shopify and e-commerce stores specifically (not just general IT security) Strong background in web/application security and common attack vectors Familiarity with Shopify's permission model, app ecosystem, and admin architecture Ability to explain technical risks clearly to a non-technical founder Discretion and professionalism handling sensitive business and customer data Deliverables: Comprehensive audit report (findings + severity + impact) Prioritized remediation roadmap (quick wins vs. longer-term fixes) A call to walk us through the findings and answer questions To apply: Briefly describe your relevant Shopify/e-commerce security experience, share any comparable audits you've done (sanitized is fine), and outline your approach and rough timeline. We may request an NDA before granting any access.