Senior PHP Developer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Participate in the vulnerability remediation initiative for a client.

• Address prioritized issues from the security backlog through root-cause analysis, execution, deployment, validation, and closure documentation.

• Resolve PHP vulnerabilities related to injection, authentication, deserialization, and credential exposure.

• Refactor insecure patterns and eliminate hardcoded secrets.

• Upgrade dependencies and packages using Composer, addressing breaking changes and transitive conflicts.

• Conduct AWS remediation tasks, including configuration hardening, IAM modifications, and secret rotation.

• Transition credentials to a managed secrets store in collaboration with the Remediation Lead.

• Confirm fixes through automated testing and ensure that identified issues do not reoccur.

• Detect recurring patterns that need systemic solutions and document them in the team playbook.

• Collaborate closely with the client's engineering team, adhering to their branching, code review, CI/CD, and definition-of-done protocols.

• Assist client engineers in embracing secure coding practices.

⛳️ Requirements

• Professional experience in PHP development, including work on legacy or inherited codebases.

• Recent and active PHP involvement is essential.

• Practical experience in security remediation by personally addressing OWASP Top 10 class vulnerabilities at the code level.

• Strong English communication skills for daily written and verbal interaction with a US-based engineering team.

• Senior or higher seniority level is required.

• Experience in writing automated tests using PHPUnit or equivalent frameworks.

• Bachelor's degree in Computer Science, Information Technology, or a related field.

• Nice to have: Proficiency in Git, familiarity with code review practices, and experience with CI/CD pipelines.

• Nice to have: Knowledge of Snyk, Veracode, Dependabot, or Checkmarx.

• Nice to have: Experience in managing a security or technical debt backlog against throughput objectives.

• Nice to have: Familiarity with modern PHP frameworks such as Laravel and Symfony, along with legacy pre-framework PHP.

• Nice to have: AWS experience with PHP applications, including EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store.

• Nice to have: Infrastructure as Code experience with Terraform or CloudFormation.

• Nice to have: Containerization experience using Docker and ECS or EKS.

• Nice to have: Experience integrating with legacy systems.

🏝️ Benefits

• Health and dental insurance.

• Meal and food allowance.

• Childcare assistance.

• Extended paternity leave.

• Partnerships with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass.

• Profit Sharing and Results Participation (PLR).

• Life insurance.

• Continuous learning platform (CI&T University).

• Discount club.

• Free online platform dedicated to physical, mental, and overall well-being.

• Pregnancy and responsible parenting course.

• Partnerships with online learning platforms.

• Language learning platform.

• Inclusion support and accommodations during the selection process.

• Dedicated Health and Well-being team, inclusion specialists, and affinity groups.