Security Triage & Remediation Lead

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CI&T

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1995

💼 Consulting

🏥 Healthcare

📣 Marketing

💰 $5.5M Venture Round on 2014-04

Consulting • Healthcare • Marketing

CI&T is a global tech transformation specialist focusing on helping organizations navigate their technology journey. With services spanning from application modernization and cloud solutions to AI-driven data analytics and customer experience, CI&T empowers businesses to accelerate their growth and maximize operational efficiency. The company emphasizes digital product design, strategy consulting, and immersive experiences, ensuring a robust support system for enterprises in various industries.

📋 Description

• Take prioritized remediation items from the backlog through deployed, validated completion • Research assigned vulnerabilities, reproduce them where possible, identify root causes, and determine appropriate fixes • Implement PHP code-level remediation for vulnerable patterns, injection, authentication, deserialization, exposure defects, and hardcoded credentials • Perform dependency and package upgrades, resolving breaking changes and transitive conflicts • Perform AWS-side remediation and deployment, including configuration hardening and IAM adjustments • Execute secret rotation tasks, update consumers, and migrate credentials to a managed secrets store • Validate fixes with automated tests, reproduction checks, and documented closure evidence • Work embedded with the client's engineering team and follow branching, code review, CI/CD, and definition-of-done practices • Identify recurring vulnerability patterns requiring systemic fixes and contribute to the remediation playbook • Support the client's engineers in adopting secure coding practices

🎯 Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field • Professional PHP development experience, including work on legacy or inherited codebases • Good English communication skills in reading, writing, and speaking • Demonstrated secure coding practice and personal remediation of OWASP Top 10 vulnerabilities • Practical AWS experience • Strong dependency management with Composer, including resolving upgrade conflicts • Proficiency with Git, code review discipline, and CI/CD pipelines • Experience writing automated tests with PHPUnit or an equivalent framework • Nice-to-have: experience with Snyk, Veracode, Dependabot, or Checkmarx • Nice-to-have: experience with security or technical debt backlogs and throughput targets • Nice-to-have: Laravel or Symfony and legacy pre-framework PHP • Nice-to-have: Terraform or CloudFormation • Nice-to-have: AWS PHP application deployment and operations using EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store • Nice-to-have: Docker and ECS or EKS • Nice-to-have: IBM i / RPG or SOAP services • Nice-to-have: mortgage, lending, or financial services experience • Nice-to-have: experience with international clients

🏖️ Benefits

• Health and dental insurance • Meal and food allowance • Childcare assistance • Extended paternity leave • Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass • Profit Sharing and Results Participation (PLR) • Life insurance • Continuous learning platform (CI&T University) • Discount club • Free online platform dedicated to physical, mental, and overall well-being • Pregnancy and responsible parenting course • Partnerships with online learning platforms • Language learning platform • Health and Well-being team, inclusion specialists, and affinity groups • Support and accommodations for people with disabilities • Remote work arrangement