FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in PHP development, particularly in vulnerability remediation and secure coding practices. Proficient in automated testing and AWS configurations, with a strong focus on collaboration and communication within engineering teams.
Highest-signal resume keywords
PHP Development ExperienceSecurity Remediation ExperienceAutomated Testing with PHPUnitAWS Configuration HardeningCI/CD Pipeline Familiarity
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PHPVulnerability RemediationAutomated TestingDependency Management with ComposerOWASP Top 10Legacy Codebase ManagementConfiguration HardeningIAM AdjustmentsSecrets ManagementModern PHP Frameworks
Soft Skills
Excellent English Communication
Tools & Technologies
GitSnykVeracodeDependabotCheckmarxTerraformCloudFormationDockerECSEKS
Certifications & Qualifications
Bachelor's Degree in Computer ScienceBachelor's Degree in Information Technology
Industry Keywords
Vulnerability Remediation ProgramSecurity BacklogAutomated TestsCode ReviewCI/CD PracticesTechnical Debt BacklogSecrets StoreInfrastructure as CodeContainerizationLegacy Systems Integration
Tech Stack
Tools & technologiesAWSDockerEC2LaravelPHPSymfonyTerraform
About the role
Key responsibilities & impact- Join the vulnerability remediation program for one of CI&T's clients
- Take prioritized findings from the security backlog through research, implementation, deployment, validation, and closure evidence
- Remediate PHP vulnerabilities involving injection, authentication, deserialization, and credential exposure
- Refactor vulnerable patterns and remove hardcoded secrets
- Perform dependency and package upgrades using Composer, resolving breaking changes and transitive conflicts
- Execute AWS-side remediation, including configuration hardening, IAM adjustments, and secret rotation
- Migrate credentials to a managed secrets store in coordination with the Remediation Lead
- Validate fixes through automated tests and confirm findings no longer reproduce
- Identify recurring patterns requiring systemic fixes and contribute them to the team playbook
- Work embedded with the client's engineering team, following branching, code review, CI/CD, and definition-of-done practices
- Support client engineers in adopting secure coding practices
Requirements
What you’ll need- Professional PHP development experience, including work on legacy or inherited codebases
- Recent, active PHP work
- Hands-on security remediation experience personally fixing OWASP Top 10 class vulnerabilities at code level
- Excellent English communication skills for daily written and spoken collaboration with a US-based engineering team
- Senior or above seniority level
- Experience writing automated tests with PHPUnit or equivalent
- Bachelor's degree in Computer Science, Information Technology, or a related field
- Nice to have: Proficiency with Git, code review discipline, and CI/CD pipelines
- Nice to have: Experience with security scanners at volume, including Snyk, Veracode, Dependabot, or Checkmarx
- Nice to have: Experience burning down a security or technical debt backlog against throughput targets
- Nice to have: Modern PHP frameworks such as Laravel and Symfony alongside legacy pre-framework PHP
- Nice to have: AWS experience with PHP applications, including EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store
- Nice to have: Infrastructure as Code with Terraform or CloudFormation
- Nice to have: Containerization with Docker and ECS or EKS
- Nice to have: Experience integrating with legacy systems
Benefits
Comp & perks- Health and dental insurance
- Meal and food allowance
- Childcare assistance
- Extended paternity leave
- Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass
- Profit Sharing and Results Participation (PLR)
- Life insurance
- Continuous learning platform (CI&T University)
- Discount club
- Free online platform dedicated to physical, mental, and overall well-being
- Pregnancy and responsible parenting course
- Partnerships with online learning platforms
- Language learning platform
- Health and Well-being team, inclusion specialists, and affinity groups
- Support and accommodations for people with disabilities during the selection process