--- title: "[Job - 31025] Senior PHP Developer, Brazil" company: "CI&T" company_url: "https://www.remjobs.works/companies/ci-t" url: "https://www.remjobs.works/job/ci-t-job-31025-senior-php-developer-brazil-c45fca23-db13-476c-9a7a-22913d6395ec" apply_url: "https://jobs.lever.co/ciandt/911d352e-d8e9-45cf-97c0-8eb1b5b949f8" workplace: remote location: "Brazil" remote_scope: "Brazil" employment_type: other seniority: senior role: software-engineering region: latin-america skills: ["aws", "docker", "php", "terraform"] date_posted: 2026-09-03T19:01:00.991Z first_seen_by_remjobs: 2026-09-15T15:52:37.851Z --- # [Job - 31025] Senior PHP Developer, Brazil **CI&T** · Brazil Apply: https://jobs.lever.co/ciandt/911d352e-d8e9-45cf-97c0-8eb1b5b949f8 ## About the role At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions. With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy. We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day. We are looking for a **PHP Developer** to join the vulnerability remediation program of one of our clients. Their security scanning tooling is surfacing more findings than the internal team can close — your job is to close that gap. This is not advisory work and it is not a pure security analyst role: you will spend your days in the PHP codebase and in AWS, implementing fixes, validating closures, and driving remediation throughput at scale.The ideal candidate has worked extensively with PHP *and* has hands-on experience remediating security vulnerabilities, not just identifying them. **What You Will Do** - Take prioritized findings from the security backlog and drive each one to deployed, validated completion — researching root cause, implementing the correct fix, deploying it, and producing closure evidence for the client's risk program. - Remediate PHP vulnerabilities hands-on: fix injection, authentication, deserialization, and credential exposure defects; refactor vulnerable patterns; and remove hardcoded secrets. - Perform dependency and package upgrades using Composer, resolving breaking changes and transitive conflicts. - Execute AWS-side remediation: configuration hardening, IAM adjustments, and secret rotation — migrating credentials to a managed secrets store in coordination with the Remediation Lead. - Validate every fix through automated tests and confirm the finding no longer reproduces. - Identify recurring patterns that warrant a systemic fix rather than repeated one-off remediation, and contribute them to the team playbook. - Work embedded with the client's engineering team, following their branching, code review, CI/CD, and definition of done. - Support client engineers in adopting secure coding practices. **What We Require** - Professional PHP development experience — including work on legacy or inherited codebases. Recent, active PHP work is required; - Hands-on security remediation experience — you must have personally fixed OWASP Top 10 class vulnerabilities at code level. Understanding them conceptually is not enough. - Excellent English communication skills — daily written and spoken collaboration with a US-based engineering team. - Senior or above seniority level - Experience writing automated tests with PHPUnit or equivalent. - Bachelor's degree in Computer Science, Information Technology, or a related field. **Nice to Have** - Proficiency with Git, code review discipline, and CI/CD pipelines. - Experience working with security scanners at volume: Snyk, Veracode, Dependabot, or Checkmarx. - Prior experience burning down a security or technical debt backlog against throughput targets. - Modern PHP frameworks (Laravel, Symfony) alongside legacy pre-framework PHP. - AWS experience specifically with PHP applications: EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store. - Infrastructure as Code with Terraform or CloudFormation. - Containerization with Docker and ECS or EKS. - Experience integrating with legacy systems #LI-JM5 **Our benefits:** -Health and dental insurance -Meal and food allowance -Childcare assistance -Extended paternity leave -Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass; -Profit Sharing and Results Participation (PLR); -Life insurance -Continuous learning platform (CI&T University); -Discount club -Free online platform dedicated to physical, mental, and overall well-being -Pregnancy and responsible parenting course -Partnerships with online learning platforms -Language learning platform And many more! More details about our benefits here: [https://ciandt.com/br/pt-br/carreiras](https://ciandt.com/br/pt-br/carreiras) At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important** to present your assessment during the selection process. ***See which data needs to be included in the report by [clicking here](https://docs.google.com/presentation/d/12BqYLIGeEyp9t0ZdF2b4bvnjFLza4E8fmbcowWeBlfk/edit?slide=id.g3a9cf52bf2b_0_0#slide=id.g3a9cf52bf2b_0_0)*[.](https://docs.google.com/presentation/d/12BqYLIGeEyp9t0ZdF2b4bvnjFLza4E8fmbcowWeBlfk/edit?slide=id.g3a9cf52bf2b_0_0#slide=id.g3a9cf52bf2b_0_0)This way, we can ensure the support and accommodations that you deserve. **If you do not yet have the assessment, don't worry: we can support you in obtaining it.** We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side. --- Source: CI&T's own career page, read by RemJobs. Canonical HTML version: https://www.remjobs.works/job/ci-t-job-31025-senior-php-developer-brazil-c45fca23-db13-476c-9a7a-22913d6395ec