About the role

What We're Researching: We're running a paid study on the intersection of full-stack development and cybersecurity practices. Our goal is to understand how engineering teams balance feature development with robust vulnerability verification. This research will help refine tooling and processes for secure application deployment.

How It Works: You will participate in a remote technical interview to discuss your recent development projects. We will ask you to walk through your approach to managing CI/CD pipelines and integrating security checks. You will react to a few hypothetical deployment scenarios and explain how you verify vulnerabilities. The conversation will focus on your day-to-day workflow and technical decision-making process.

Who This Is For: We welcome full-stack engineers, application security engineers, and DevOps professionals with a strong cybersecurity background. You should have hands-on experience owning application features and securing deployment pipelines. Candidates who regularly perform vulnerability verification in production environments are an ideal fit for this conversation.

Scope of Work

• Walk us through your process for integrating security into CI/CD pipelines
• Describe how you handle vulnerability verification during feature development
• React to technical scenarios involving application security threats
• Discuss your day-to-day workflow for balancing feature velocity with security requirements

What you’ll bring

• Active full-stack engineer or application security professional
• Strong background in cybersecurity and threat management
• Hands-on experience managing and securing CI/CD pipelines
• Familiarity with vulnerability verification processes in production
• Must be located in Brazil or Argentina.
• Must be 18 years of age or older.
• Must be fluent in English.
• Must have found and reported vulnerabilities in code they did not write, or reviewed raw scanner/penetration test output to determine genuine findings.
• Must have personally built and run a web frontend and a backend service in production.
• Must have built a GitHub App/Action for external organization repositories, or built a team's CI and release pipeline from scratch.
• Must have deployed machine learning models to a serving platform.
• Must be able to work United States business hours.
• Must be able to own bug fixes end-to-end and resolve customer-reported issues within days.
• Must provide public evidence of engineering or security work, such as a GitHub profile, HackerOne/Bugcrowd profile, CVE, or published write-up.

Benefits

Not provided in the source listing.

Schedule and availability

Must be able to work United States business hours. The supplied screening description estimates about 10 minutes.

Contract & Payment Terms

• You will be engaged as an independent contractor.
• This is a fully remote opportunity that can be completed on your own schedule.
• Opportunities can be extended, shortened, or concluded early depending on needs and performance.
• Your participation will not involve access to confidential or proprietary information from any employer, client, or institution.
• Payments are processed weekly based on services rendered.
• We are unable to support H1-B or STEM OPT candidates at this time.

Where you can work

Location eligibility: Brazil, Argentina. Terac cannot support H1-B or STEM OPT candidates at this time.

This role is open to people based in: Brazil, Argentina.

Remote does not always mean work from any country. Always check the employer’s location and working-hour requirements.