Senior PHP Developer, Security Remediation

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take prioritized remediation items from the backlog and drive them to successful deployment and validation.

• Research assigned vulnerabilities, reproduce them when feasible, identify the root cause, and determine the appropriate fix.

• Implement code-level remediation in PHP, addressing issues such as injection, authentication, deserialization, and exposure defects, as well as removing hardcoded credentials.

• Perform upgrades for dependencies and packages while resolving any breaking changes and transitive conflicts.

• Conduct AWS-side remediation and deployment, which includes configuration hardening and adjustments to IAM.

• Execute secret rotation tasks, update consumers, and transition credentials to a managed secrets store.

• Validate fixes through automated tests, reproduction checks, and documentation of closure evidence.

• Collaborate closely with the client's engineering team in accordance with their branching, code review, CI/CD, and definition-of-done processes.

• Identify recurring patterns that necessitate systemic fixes and contribute to the remediation playbook.

• Assist the client's engineers in adopting secure coding practices.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related discipline.

• Professional experience in PHP development, including work with legacy or inherited codebases.

• Proficient English communication skills in reading, writing, and speaking.

• Proven track record of secure coding practices, including personally remediated OWASP Top 10 vulnerabilities.

• Practical experience with AWS.

• Strong dependency management skills using Composer, including the ability to resolve upgrade conflicts.

• Proficiency in Git, adherence to code review protocols, and experience with CI/CD pipelines.

• Experience in writing automated tests using PHPUnit or a similar framework.

🏝️ Benefits

• Health and dental insurance.

• Meal and food allowance.

• Childcare assistance.

• Extended paternity leave.

• Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass.

• Profit Sharing and Results Participation (PLR).

• Life insurance.

• Continuous learning platform (CI&T University).

• Discount club.

• Free online platform dedicated to physical, mental, and overall well-being.

• Pregnancy and responsible parenting course.

• Partnerships with online learning platforms.

• Language learning platform.

• Health and Well-being team, inclusion specialists, and affinity groups.

• Support for obtaining disability assessment and workplace accommodations.