Full-Stack Engineers (Cybersecurity): Feedback On CI/CD Workflows

Terac

31d•$105•Remote

About The Position

We are conducting a paid research study focused on the integration of full-stack development and cybersecurity practices. The objective is to understand how engineering teams incorporate vulnerability verification into their CI/CD pipelines. The insights gathered will be used to develop future developer tools aimed at simplifying secure application feature ownership. Participants will engage in a remote video session to discuss a recent project where they managed both application development and vulnerability verification. They will describe their current CI/CD setup, detailing the steps taken for secure deployments, and provide feedback on conceptual workflows. The discussion will resemble a technical interview, emphasizing daily security routines.

Requirements

Professional experience as a full-stack engineer, DevSecOps engineer, or similar role.
Strong background in cybersecurity and application security practices.
Hands-on experience configuring and maintaining CI/CD pipelines.
Comfortable discussing vulnerability verification and secure deployment workflows.

Nice To Haves

Experience as a full-stack engineer with a dedicated focus or strong background in cybersecurity.
Hands-on experience managing application features, configuring CI/CD pipelines, and verifying vulnerabilities prior to production.
Experience as a DevSecOps engineer or security-focused backend developer handling similar deployment pipelines.

Responsibilities

Walk through the process of integrating vulnerability verification into CI/CD pipelines.
Discuss the balance between application feature development and security requirements.
Provide feedback on new concepts for managing and deploying secure full-stack applications.
Describe a recent challenge faced while securing a production pipeline.