RemoteLeaf Logo
Log in Sign up

[Job - 31026] Senior PHP Developer (Security Remediation), Brazil

1 month ago
Brazil
Full-time
Senior
Backend Engineer
Software Development
Agile AWS CloudFormation Docker EC2 Git Laravel PHP SOAP Symfony Terraform
Apply Now
CI&T

CI&T

CI&T is a global digital technology agency empowering agile growth for leading companies through advanced technologies with a team of 2000 experts worldwide.

Internet Software & Services
5K-10K
Founded 1995
View All Jobs 151

Description

  • Take prioritized remediation items from the backlog through deployed, validated completion.
  • Research vulnerabilities by reproducing issues where possible, identifying root causes, and determining the correct fix.
  • Implement code-level remediation in PHP, including refactoring vulnerable patterns and fixing injection, authentication, deserialization, exposure defects, and hardcoded credentials.
  • Perform dependency and package upgrades while resolving breaking changes and transitive conflicts.
  • Carry out AWS-side remediation and deployment, including configuration hardening and IAM adjustments.
  • Execute secret rotation tasks and migrate credentials to a managed secrets store in coordination with the Remediation Lead.
  • Validate each fix by writing or extending automated tests, confirming the issue no longer reproduces, and documenting closure evidence.
  • Work embedded with the client’s engineering team using their branching, code review, CI/CD, and definition-of-done practices.
  • Identify recurring remediation patterns that should become systemic fixes and contribute them to the remediation playbook.
  • Support the client’s engineers in adopting secure coding practices.

Requirements

  • Bachelor’s degree in Computer Science, Information Technology, or a related field.
  • Professional PHP development experience, including work on legacy or inherited codebases.
  • Strong English communication skills for daily collaboration with a US-based engineering team.
  • Demonstrated secure coding practice with personally remediated OWASP Top 10 vulnerabilities.
  • Practical AWS experience.
  • Strong dependency management experience with Composer, including resolving upgrade conflicts.
  • Proficiency with Git, code review discipline, and CI/CD pipelines.
  • Experience writing automated tests with PHPUnit or an equivalent framework.
  • Experience remediating scanner findings at volume (Snyk, Veracode, Dependabot, Checkmarx) is preferred.
  • Experience with modern PHP frameworks such as Laravel or Symfony, alongside legacy pre-framework PHP, is preferred.
  • Infrastructure as Code experience with Terraform or CloudFormation is preferred.
  • AWS deployment and operations experience across EC2, ECS, Elastic Beanstalk, or Lambda; IAM; S3; RDS; CloudWatch; and Secrets Manager or Parameter Store is preferred.
  • Containerization experience with Docker and ECS or EKS is preferred.
  • Experience integrating with legacy systems such as IBM i / RPG or SOAP services is preferred.
  • Experience in mortgage, lending, or financial services is preferred.
  • Experience working with international clients is preferred.

Benefits

  • Health and dental insurance.
  • Meal and food allowance.
  • Childcare assistance.
  • Extended paternity leave.
  • Gym and wellness partnerships through Wellhub (Gympass) and TotalPass.
  • Profit Sharing and Results Participation (PLR).
  • Life insurance.
  • Continuous learning through CI&T University and partnerships with online learning platforms.
  • Discount club.
  • Free online platform for physical, mental, and overall well-being support.
  • Pregnancy and responsible parenting course.
  • Language learning platform.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

SimplePractice

Senior Ruby on Rails Engineer (Hybrid)

SimplePractice 251-1K Health Care Providers & Services

SimplePractice is hiring a remote Senior Software Engineer in Mexico to build and enhance its practice management platform, with a primary focus on Ruby on Rails backend development.

Mexico Full-time Senior Backend Engineer
$7k-$9k
Ansible AWS Docker GitHub HIPAA JavaScript Linux MySQL Nginx Notion PostgreSQL React Redis Ruby Ruby on Rails Terraform
15 hours, 38 minutes ago
Bluelight Consulting

Full Stack and Backend NodeJS TypeScript/JavaScript Engineer (Senior) - Latin America, Remote

Bluelight Consulting 11-50 Internet Software & Services

Bluelight is seeking a backend-focused software developer to build secure, scalable applications and API services for diverse client projects within its growing software consultancy.

Peru Full-time Senior Backend Engineer Full-stack Engineer
AWS CI/CD Docker Fastify JavaScript Node.js PostgreSQL React REST API SQL TypeScript
15 hours, 53 minutes ago
Bluelight Consulting

Full Stack and Backend NodeJS TypeScript/JavaScript Engineer (Senior) - Latin America, Remote

Bluelight Consulting 11-50 Internet Software & Services

Bluelight is hiring a backend-focused software developer to build secure, scalable applications and API services for diverse client projects within its growing remote consultancy.

Paraguay Full-time Senior Backend Engineer Full-stack Engineer
AWS CI/CD Docker Fastify JavaScript Node.js PostgreSQL React REST API SQL TypeScript
15 hours, 53 minutes ago
Bluelight Consulting

Full Stack and Backend NodeJS TypeScript/JavaScript Engineer (Senior) - Latin America, Remote

Bluelight Consulting 11-50 Internet Software & Services

Bluelight is hiring a backend-focused Software Developer to build secure, scalable applications and API services for clients in a collaborative, growing software consultancy.

Mexico Full-time Senior Backend Engineer Full-stack Engineer
AWS CI/CD Docker Fastify JavaScript Node.js PostgreSQL React REST API SQL TypeScript
16 hours, 7 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers