Full-Stack Engineers (Cybersecurity): Feedback On CI/CD Workflows

Role overview

This is a paid, remote research session, not a traditional full-time position. The study explores how full-stack engineering teams weave vulnerability verification into their CI/CD pipelines. Participants take part in a one-on-one video conversation and provide candid reactions to conceptual workflow designs.

Responsibilities

- Walk a researcher through a recent project where you owned both application development and pre-production vulnerability verification - Describe your current CI/CD setup, including the concrete steps that lead to a secure deployment - React to conceptual pipeline and feature-delivery workflows and share practical feedback - Discuss how you balance feature development with security requirements - Recount a meaningful challenge from securing a production pipeline

Requirements

- Professional experience as a full-stack engineer, DevSecOps engineer, or security-focused backend developer - A strong background in cybersecurity and application security practices - Hands-on experience configuring and maintaining CI/CD pipelines - Comfort discussing vulnerability verification and secure deployment workflows in detail

Nice to have

- Experience owning application features end-to-end, from code through verification to release - Familiarity with secure-deployment patterns beyond standard tooling

Benefits and work setup

- Remote video session, scheduled at the participant's convenience - Compensation of $105 per hour for time spent in the session - Insights from the study are intended to inform future developer tools for secure application ownership