Full-Stack Engineers: Interview on Cybersecurity and CI/CD Pipelines

Remolity, Inc.; San Mateo (CA); Remote; USD 83,000 - 165,000; Full time

Job summary

Remolity, Inc. is conducting a remote study for engineers focusing on balancing feature delivery with security in CI/CD pipelines. You will discuss your approach to securing deployments and verifying vulnerabilities in real-world workflows.

Ideal candidates are full-stack engineers or application security professionals with hands-on deployment experience, fluent in English, and available to work US business hours. This is a remote, contractor-style engagement open to eligible regions.

Qualifications

• Experience owning web features and securing deployment pipelines.
• Proven vulnerability verification in production environments.
• Built and run web frontend and backend services in production.
• Created a GitHub App/Action for external repositories or built CI/release pipelines.
• Deployed machine learning models to serving platforms.

Responsibilities

• Walk us through integrating security into CI/CD pipelines.
• Describe handling vulnerability verification during feature development.
• React to scenarios involving application security threats.
• Discuss day-to-day workflow balancing feature velocity with security.

Skills

Full-stack engineering

Application security

CI/CD pipelines

Vulnerability verification

Threat management

English fluency

Tools

GitHub Actions

Job description

Special Referral gives your application an enhanced referral route, helping it stand out and potentially improving your chances of being considered.

About the role

What We're Researching: We're running a paid study on the intersection of full-stack development and cybersecurity practices. Our goal is to understand how engineering teams balance feature development with robust vulnerability verification. This research will help refine tooling and processes for secure application deployment.

How It Works: You will participate in a remote technical interview to discuss your recent development projects. We will ask you to walk through your approach to managing CI/CD pipelines and integrating security checks. You will react to a few hypothetical deployment scenarios and explain how you verify vulnerabilities. The conversation will focus on your day-to-day workflow and technical decision-making process.

Who This Is For: We welcome full-stack engineers, application security engineers, and DevOps professionals with a strong cybersecurity background. You should have hands-on experience owning application features and securing deployment pipelines. Candidates who regularly perform vulnerability verification in production environments are an ideal fit for this conversation.

Scope of Work

• Walk us through your process for integrating security into CI/CD pipelines
• Describe how you handle vulnerability verification during feature development
• React to technical scenarios involving application security threats
• Discuss your day-to-day workflow for balancing feature velocity with security requirements

What you’ll bring

• Active full-stack engineer or application security professional
• Strong background in cybersecurity and threat management
• Hands-on experience managing and securing CI/CD pipelines
• Familiarity with vulnerability verification processes in production
• Must be located in Brazil or Argentina.
• Must be 18 years of age or older.
• Must be fluent in English.
• Must have found and reported vulnerabilities in code they did not write, or reviewed raw scanner/penetration test output to determine genuine findings.
• Must have personally built and run a web frontend and a backend service in production.
• Must have built a GitHub App/Action for external organization repositories, or built a team's CI and release pipeline from scratch.
• Must have deployed machine learning models to a serving platform.
• Must be able to work United States business hours.
• Must be able to own bug fixes end-to-end and resolve customer-reported issues within days.
• Must provide public evidence of engineering or security work, such as a GitHub profile, HackerOne/Bugcrowd profile, CVE, or published write-up.

Not provided in the source listing.

Schedule and availability

Must be able to work United States business hours. The supplied screening description estimates about 10 minutes.

Contract & Payment Terms

• You will be engaged as an independent contractor.
• This is a fully remote opportunity that can be completed on your own schedule.
• Opportunities can be extended, shortened, or concluded early depending on needs and performance.
• Your participation will not involve access to confidential or proprietary information from any employer, client, or institution.
• Payments are processed weekly based on services rendered.
• We are unable to support H1-B or STEM OPT candidates at this time.

Where you can work

Location eligibility: Brazil, Argentina. Terac cannot support H1-B or STEM OPT candidates at this time.

This role is open to people based in: Brazil, Argentina.

Remote does not always mean work from any country. Always check the employer’s location and working-hour requirements.