Назад
Company hidden
5 дней назад

Senior PHP Developer (Security Remediation)

Формат работы
remote (только Brazil)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Brazil
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior PHP Developer (Security Remediation): Closing vulnerability findings in PHP codebases and AWS environments with an accent on OWASP remediation, dependency upgrades, and secure cloud configuration. Focus on implementing and validating code-level fixes, rotating secrets, resolving Composer conflicts, and driving remediation throughput at scale.

Location: Remote in Brazil

Company

CI&T delivers AI deployment, application modernization, data and AI, Martech, and technology-integrated business solutions for large enterprises.

What you will do

  • Drive prioritized security findings from root-cause analysis through deployment, validation, and closure evidence.
  • Remediate PHP vulnerabilities involving injection, authentication, deserialization, credential exposure, and hardcoded secrets.
  • Upgrade Composer dependencies and resolve breaking changes and transitive conflicts.
  • Harden AWS configurations, adjust IAM settings, rotate secrets, and migrate credentials to managed secret stores.
  • Validate fixes with automated tests, identify systemic remediation patterns, and contribute to secure-coding practices and team playbooks.
  • Work with the client’s engineering team within its branching, code review, CI/CD, and definition-of-done processes.

Requirements

  • Recent professional PHP development experience, including legacy or inherited codebases.
  • Hands-on experience fixing OWASP Top 10-class vulnerabilities at code level.
  • Excellent English communication skills for daily written and spoken collaboration with a US-based engineering team.
  • Senior-level or higher experience.
  • Experience writing automated tests with PHPUnit or an equivalent framework.
  • Bachelor’s degree in Computer Science, Information Technology, or a related field.

Nice to have

  • Git, code review, CI/CD, and security scanner experience with tools such as Snyk, Veracode, Dependabot, or Checkmarx.
  • Experience reducing security or technical debt backlogs against throughput targets.
  • Laravel or Symfony experience alongside legacy PHP.
  • AWS experience with PHP applications, Terraform or CloudFormation, Docker, ECS, or EKS.
  • Experience integrating with legacy systems.

Culture & Benefits

  • Remote home-office arrangement in Brazil.
  • Opportunity to work embedded with a client engineering team on a large-scale vulnerability remediation program.
  • Benefits are provided through CI&T’s Brazil employment offering.
  • Support and accommodations are available during the assessment process.

Hiring process

  • An assessment is included in the selection process.
  • Support is available for candidates who do not yet have the assessment.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →