RemoteLeaf Logo
Log in Sign up

[Job - 31026] Senior PHP Developer (Security Remediation), Brazil

3 weeks, 5 days ago
Brazil
Full-time
Senior
Backend Engineer
Software Development
Agile AWS CloudFormation Docker EC2 Git Laravel PHP SOAP Symfony Terraform
Apply Now
CI&T

CI&T

CI&T is a global digital technology agency empowering agile growth for leading companies through advanced technologies with a team of 2000 experts worldwide.

Internet Software & Services
5K-10K
Founded 1995
View All Jobs 142

Description

  • Take prioritized remediation items from the backlog through deployed, validated completion.
  • Research vulnerabilities by reproducing issues where possible, identifying root causes, and determining the correct fix.
  • Implement code-level remediation in PHP, including refactoring vulnerable patterns and fixing injection, authentication, deserialization, exposure defects, and hardcoded credentials.
  • Perform dependency and package upgrades while resolving breaking changes and transitive conflicts.
  • Carry out AWS-side remediation and deployment, including configuration hardening and IAM adjustments.
  • Execute secret rotation tasks and migrate credentials to a managed secrets store in coordination with the Remediation Lead.
  • Validate each fix by writing or extending automated tests, confirming the issue no longer reproduces, and documenting closure evidence.
  • Work embedded with the client’s engineering team using their branching, code review, CI/CD, and definition-of-done practices.
  • Identify recurring remediation patterns that should become systemic fixes and contribute them to the remediation playbook.
  • Support the client’s engineers in adopting secure coding practices.

Requirements

  • Bachelor’s degree in Computer Science, Information Technology, or a related field.
  • Professional PHP development experience, including work on legacy or inherited codebases.
  • Strong English communication skills for daily collaboration with a US-based engineering team.
  • Demonstrated secure coding practice with personally remediated OWASP Top 10 vulnerabilities.
  • Practical AWS experience.
  • Strong dependency management experience with Composer, including resolving upgrade conflicts.
  • Proficiency with Git, code review discipline, and CI/CD pipelines.
  • Experience writing automated tests with PHPUnit or an equivalent framework.
  • Experience remediating scanner findings at volume (Snyk, Veracode, Dependabot, Checkmarx) is preferred.
  • Experience with modern PHP frameworks such as Laravel or Symfony, alongside legacy pre-framework PHP, is preferred.
  • Infrastructure as Code experience with Terraform or CloudFormation is preferred.
  • AWS deployment and operations experience across EC2, ECS, Elastic Beanstalk, or Lambda; IAM; S3; RDS; CloudWatch; and Secrets Manager or Parameter Store is preferred.
  • Containerization experience with Docker and ECS or EKS is preferred.
  • Experience integrating with legacy systems such as IBM i / RPG or SOAP services is preferred.
  • Experience in mortgage, lending, or financial services is preferred.
  • Experience working with international clients is preferred.

Benefits

  • Health and dental insurance.
  • Meal and food allowance.
  • Childcare assistance.
  • Extended paternity leave.
  • Gym and wellness partnerships through Wellhub (Gympass) and TotalPass.
  • Profit Sharing and Results Participation (PLR).
  • Life insurance.
  • Continuous learning through CI&T University and partnerships with online learning platforms.
  • Discount club.
  • Free online platform for physical, mental, and overall well-being support.
  • Pregnancy and responsible parenting course.
  • Language learning platform.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Gomining

Software Fraud Engineer

Gomining 11-50 Construction & Engineering

Software Fraud Engineer responsible for building a next-generation fraud prevention platform that detects real-time risks and automates decisions protecting users and the business.

Latvia Poland Serbia Georgia Spain Cyprus Full-time Mid Level Backend Engineer Software Engineer
Blockchain ClickHouse Elasticsearch Go Java Kafka Kotlin Machine Learning Python Redis SQL
27 minutes ago
Rithum

Staff Information Security Engineer - AI First

Rithum Internet Software & Services

Rithum is hiring a Staff AI-First Information Security Engineer to secure its AI-enabled commerce platform and workforce by building automated controls, guardrails, and monitoring that enable scalable innovation.

United States Full-time Lead Security Engineer
$170k-$220k
AWS Python SIEM Terraform
22 hours, 57 minutes ago
GR8 Tech

Senior Java Developer

GR8 Tech 251-1K IT Services

GR8_TECH is hiring a Backend Engineer to build and maintain high-load Casino platform services covering bonuses, wallets, transactions, game catalogs, launches, and provider integrations.

Anywhere Full-time Senior Backend Engineer
Cassandra Elasticsearch GitLab CI Grafana Java Kafka Kubernetes Microservices Play Framework Prometheus Redis REST API Scala Spring Boot SQL
23 hours, 12 minutes ago
Bluelight Consulting

Full Stack and Backend NodeJS TypeScript/JavaScript Engineer (Senior) - Remote, Latin America

Bluelight Consulting 11-50 Internet Software & Services

Bluelight is hiring a backend-focused software developer to build secure, scalable applications and API services for diverse client projects within its growing remote software consultancy.

Mexico Full-time Senior Backend Engineer Full-stack Engineer
AWS CI/CD Docker Fastify JavaScript Node.js PostgreSQL React REST API SQL TypeScript
23 hours, 12 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers