Full-Stack Engineers (Cybersecurity): Feedback on CI/CD Workflows

What We're Researching

We're running a paid study on the intersection of full-stack development and cybersecurity practices. Our goal is to understand how engineering teams integrate vulnerability verification directly into their CI/CD pipelines. This feedback will help shape future developer tools designed to streamline secure application feature ownership.

How It Works

During a remote video session, you will walk us through a recent project where you owned both application development and vulnerability verification. You will be asked to describe your current CI/CD setup, highlighting the specific steps you take to ensure secure deployments. We will then show you a few conceptual workflows and ask for your candid feedback on their practicality. The conversation flows as a standard technical interview, focusing on your day-to-day security routines.

Who This Is For

We welcome full-stack engineers who have a dedicated focus or strong background in cybersecurity. You should have hands-on experience managing application features, configuring CI/CD pipelines, and verifying vulnerabilities prior to production. We also welcome DevSecOps engineers and security-focused backend developers who handle similar deployment pipelines.

Responsibilities

• Walk us through your process for integrating vulnerability verification into CI/CD pipelines
• Discuss how you balance application feature development with rigorous security requirements
• React to new concepts for managing and deploying secure full-stack applications
• Describe a recent challenge you faced while securing a production pipeline

Requirements

• Professional experience as a full-stack engineer, DevSecOps engineer, or similar role
• Strong background in cybersecurity and application security practices
• Hands-on experience configuring and maintaining CI/CD pipelines
• Comfortable discussing vulnerability verification and secure deployment workflows