[Job - 31025] Senior PHP Developer, Brazil

Ciandt; Brasil; Presencial; BRL 120 000 - 240 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance and dental

Meal and food allowance

Childcare assistance

Extended paternity leave

Wellness program

Profit Sharing (PLR)

Life insurance

CI&T University

Online learning partnerships

Language learning platform

Resumo da oferta

CI&T in Brazil is seeking a PHP Developer to join a vulnerability remediation program for a client. You will work in the PHP codebase and AWS, implementing fixes and driving remediation throughput at scale.

The ideal candidate has hands-on remediation of OWASP Top 10 vulnerabilities, strong PHP experience, PHPUnit tests, Git, CI/CD, and AWS expertise; senior level with a CS/IT degree. This role is on-site in Brazil with global collaboration.

Qualificações

• Professional PHP development experience — including work on legacy or inherited codebases.
• Hands-on security remediation experience — you must have personally fixed OWASP Top 10 class vulnerabilities at code level.
• Excellent English communication skills — daily written and spoken collaboration with a US-based engineering team.
• Senior or above seniority level
• Experience writing automated tests with PHPUnit or equivalent.
• Bachelor's degree in Computer Science, Information Technology, or a related field.

Responsabilidades

• Take prioritized findings from the security backlog and drive each one to deployed, validated completion — researching root cause, implementing the correct fix, deploying it, and producing closure evidence for the client's risk program.
• Remediate PHP vulnerabilities hands-on: fix injection, authentication, deserialization, and credential exposure defects; refactor vulnerable patterns; and remove hardcoded secrets.
• Perform dependency and package upgrades using Composer, resolving breaking changes and transitive conflicts.
• Execute AWS-side remediation: configuration hardening, IAM adjustments, and secret rotation — migrating credentials to a managed secrets store in coordination with the Remediation Lead.
• Validate every fix through automated tests and confirm the finding no longer reproduces.
• Identify recurring patterns that warrant a systemic fix rather than repeated one-off remediation, and contribute them to the team playbook.
• Work embedded with the client's engineering team, following their branching, code review, CI/CD, and definition of done.
• Support client engineers in adopting secure coding practices.

Conhecimentos

PHP development

Security remediation

English communication

Senior level

Automated tests (PHPUnit)

Formação académica

Bachelor's degree in CS/IT or related field

Ferramentas

Git

CI/CD

Docker

AWS

Terraform/CloudFormation

Snyk/Veracode/Checkmarx

Descrição da oferta de emprego

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.

With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.

We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.

We are looking for a PHP Developer to join the vulnerability remediation program of one of our clients. Their security scanning tooling is surfacing more findings than the internal team can close — your job is to close that gap. This is not advisory work and it is not a pure security analyst role: you will spend your days in the PHP codebase and in AWS, implementing fixes, validating closures, and driving remediation throughput at scale. The ideal candidatehas worked extensively with PHP and has hands-on experience remediating security vulnerabilities, not just identifying them.

What You Will Do

• Take prioritized findings from the security backlog and drive each one to deployed, validated completion — researching root cause, implementing the correct fix, deploying it, and producing closure evidence for the client's risk program.
• Remediate PHP vulnerabilities hands-on: fix injection, authentication, deserialization, and credential exposure defects; refactor vulnerable patterns; and remove hardcoded secrets.
• Perform dependency and package upgrades using Composer, resolving breaking changes and transitive conflicts.
• Execute AWS-side remediation: configuration hardening, IAM adjustments, and secret rotation — migrating credentials to a managed secrets store in coordination with the Remediation Lead.
• Validate every fix through automated tests and confirm the finding no longer reproduces.
• Identify recurring patterns that warrant a systemic fix rather than repeated one-off remediation, and contribute them to the team playbook.
• Work embedded with the client's engineering team, following their branching, code review, CI/CD, and definition of done.
• Support client engineers in adopting secure coding practices.

What We Require

• Professional PHP development experience — including work on legacy or inherited codebases. Recent, active PHP work is required;
• Hands-on security remediation experience — you must have personally fixed OWASP Top 10 class vulnerabilities at code level. Understanding them conceptually is not enough.
• Excellent English communication skills — daily written and spoken collaboration with a US-based engineering team.
• Senior or above seniority level
• Experience writing automated tests with PHPUnit or equivalent.
• Bachelor's degree in Computer Science, Information Technology, or a related field.

Nice to Have

• Proficiency with Git, code review discipline, and CI/CD pipelines.
• Experience working with security scanners at volume: Snyk, Veracode, Dependabot, or Checkmarx.
• Prior experience burning down a security or technical debt backlog against throughput targets.
• Modern PHP frameworks (Laravel, Symfony) alongside legacy pre-framework PHP.
• AWS experience specifically with PHP applications: EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store.
• Infrastructure as Code with Terraform or CloudFormation.
• Containerization with Docker and ECS or EKS.
• Experience integrating with legacy systems

Our benefits:

• Health and dental insurance
• Meal and food allowance
• Childcare assistance
• Extended paternity leave
• Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass;
• Profit Sharing and Results Participation (PLR);
• Life insurance
• Continuous learning platform (CI&T University);
• Discount club
• Free online platform dedicated to physical, mental, and overall well-being
• Pregnancy and responsible parenting course
• Partnerships with online learning platforms
• Language learning platform

And many more!

More details about our benefits here: https://ciandt.com/br/pt-br/carreiras

At CI&T, inclusion starts at the first contact.

If you are a person with a disability, it is important to present your assessment during the selection process.

See which data needs to be included in the report by clicking here.

This way, we can ensure the support and accommodations that you deserve.

If you do not yet have the assessment, don't worry: we can support you in obtaining it.

We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage.

Count on us to make this journey side by side.