Senior PHP Developer, Security Remediation

Job not on LinkedIn

🔥 8 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CI&T

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1995

💼 Consulting

🏥 Healthcare

📣 Marketing

💰 $5.5M Venture Round on 2014-04

Consulting • Healthcare • Marketing

CI&T is a global tech transformation specialist focusing on helping organizations navigate their technology journey. With services spanning from application modernization and cloud solutions to AI-driven data analytics and customer experience, CI&T empowers businesses to accelerate their growth and maximize operational efficiency. The company emphasizes digital product design, strategy consulting, and immersive experiences, ensuring a robust support system for enterprises in various industries.

📋 Description

• Take prioritized remediation items from the backlog and drive them to deployed, validated completion • Research assigned vulnerabilities, reproduce them where possible, identify root cause, and determine the correct fix • Implement code-level remediation in PHP, including fixing injection, authentication, deserialization, and exposure defects and removing hardcoded credentials • Perform dependency and package upgrades while resolving breaking changes and transitive conflicts • Perform AWS-side remediation and deployment, including configuration hardening and IAM adjustments • Execute secret rotation tasks, update consumers, and migrate credentials to a managed secrets store • Validate fixes with automated tests, reproduction checks, and closure evidence documentation • Work embedded with the client's engineering team according to its branching, code review, CI/CD, and definition-of-done processes • Identify recurring patterns requiring systemic fixes and contribute to the remediation playbook • Support the client's engineers in adopting secure coding practices

🎯 Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field • Professional PHP development experience, including work on legacy or inherited codebases • Good English communication skills in reading, writing, and speaking • Demonstrated secure coding practice, including personally remediated OWASP Top 10 vulnerabilities • Practical AWS experience • Strong dependency management with Composer, including resolving upgrade conflicts • Proficiency with Git, code review discipline, and CI/CD pipelines • Experience writing automated tests with PHPUnit or an equivalent framework

🏖️ Benefits

• Health and dental insurance • Meal and food allowance • Childcare assistance • Extended paternity leave • Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass • Profit Sharing and Results Participation (PLR) • Life insurance • Continuous learning platform (CI&T University) • Discount club • Free online platform dedicated to physical, mental, and overall well-being • Pregnancy and responsible parenting course • Partnerships with online learning platforms • Language learning platform • Health and Well-being team, inclusion specialists, and affinity groups • Support obtaining disability assessment and workplace accommodations