5 дней назад
Senior PHP Developer (Security Remediation), Brazil
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior PHP Developer (Security Remediation), Brazil (PHP/AWS security): Remediating vulnerabilities in PHP codebases and AWS environments with an accent on secure coding, dependency upgrades, IAM hardening, and secret rotation. Focus on reproducing findings, implementing validated fixes, writing automated tests, and documenting closure evidence for a large US mortgage lender.
Location: Brazil; remote
Company
CI&T delivers AI deployment, application modernization, data and AI, Martech, and technology-integrated business solutions for global enterprise clients.
What you will do
- Drive prioritized vulnerability remediation items from backlog research through deployment and validated closure.
- Reproduce vulnerabilities, identify root causes, and implement code-level fixes in PHP for injection, authentication, deserialization, exposure defects, and hardcoded credentials.
- Upgrade dependencies with Composer and resolve breaking changes and transitive conflicts.
- Perform AWS remediation and deployment, including configuration hardening, IAM adjustments, and secret rotation with migration to managed secrets storage.
- Write or extend automated tests, confirm findings no longer reproduce, and document closure evidence.
- Work with the client’s engineering team on code review, CI/CD, secure coding practices, and systemic remediation patterns.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- Professional PHP development experience, including legacy or inherited codebases.
- Good English communication skills required for daily collaboration with a US-based engineering team.
- Hands-on experience remediating vulnerabilities covered by the OWASP Top 10.
- Practical AWS experience, including secure configuration and deployment.
- Proficiency with Composer, Git, code review, CI/CD pipelines, and automated testing with PHPUnit or an equivalent framework.
Nice to have
- Experience with Snyk, Veracode, Dependabot, Checkmarx, or high-volume security remediation backlogs.
- Laravel or Symfony experience alongside legacy PHP.
- Terraform or CloudFormation, Docker, ECS, EKS, and AWS services such as EC2, Lambda, S3, RDS, CloudWatch, and Secrets Manager.
- Experience with IBM i/RPG, SOAP services, mortgage or lending, financial services, or international clients.
Culture & Benefits
- Remote home-office work in Brazil.
- Collaboration with global enterprise clients and engineering teams across more than 25 countries.
- Benefits are provided through CI&T’s Brazil careers program.
Hiring process
- Candidates are expected to present an assessment during the selection process.
- Support is available for obtaining the assessment if needed.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →