5 дней назад
Senior PHP Developer (Security Remediation)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior PHP Developer (Security Remediation): Closing vulnerability findings in PHP codebases and AWS environments with an accent on OWASP remediation, dependency upgrades, and secure cloud configuration. Focus on implementing and validating code-level fixes, rotating secrets, resolving Composer conflicts, and driving remediation throughput at scale.
Location: Remote in Brazil
Company
CI&T delivers AI deployment, application modernization, data and AI, Martech, and technology-integrated business solutions for large enterprises.
What you will do
- Drive prioritized security findings from root-cause analysis through deployment, validation, and closure evidence.
- Remediate PHP vulnerabilities involving injection, authentication, deserialization, credential exposure, and hardcoded secrets.
- Upgrade Composer dependencies and resolve breaking changes and transitive conflicts.
- Harden AWS configurations, adjust IAM settings, rotate secrets, and migrate credentials to managed secret stores.
- Validate fixes with automated tests, identify systemic remediation patterns, and contribute to secure-coding practices and team playbooks.
- Work with the client’s engineering team within its branching, code review, CI/CD, and definition-of-done processes.
Requirements
- Recent professional PHP development experience, including legacy or inherited codebases.
- Hands-on experience fixing OWASP Top 10-class vulnerabilities at code level.
- Excellent English communication skills for daily written and spoken collaboration with a US-based engineering team.
- Senior-level or higher experience.
- Experience writing automated tests with PHPUnit or an equivalent framework.
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
Nice to have
- Git, code review, CI/CD, and security scanner experience with tools such as Snyk, Veracode, Dependabot, or Checkmarx.
- Experience reducing security or technical debt backlogs against throughput targets.
- Laravel or Symfony experience alongside legacy PHP.
- AWS experience with PHP applications, Terraform or CloudFormation, Docker, ECS, or EKS.
- Experience integrating with legacy systems.
Culture & Benefits
- Remote home-office arrangement in Brazil.
- Opportunity to work embedded with a client engineering team on a large-scale vulnerability remediation program.
- Benefits are provided through CI&T’s Brazil employment offering.
- Support and accommodations are available during the assessment process.
Hiring process
- An assessment is included in the selection process.
- Support is available for candidates who do not yet have the assessment.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
7 дней назад
Senior Backend Developer (Magento)
5 дней назад
Senior Symfony Engineer (PHP)
Supporting Cast
5 дней назад
Software Engineer (PHP)
Keepgo
3 дня назад
PHP backend-разработчик (Laravel)
1 час назад
Senior Backend Developer (PHP)
Nearshore Business Solutions
3 дня назад
Senior PHP Developer
4 000 - 4 200$