June 2021 Summaries

Security breaches remain a persistent issue for organizations, often stemming from vulnerabilities such as leaky Amazon S3 buckets, supply chain attacks, and misconfigured CI/CD systems. Leaky S3 buckets, frequently resulting from user error and misconfiguration, continue to expose sensitive data despite default privacy settings and available preventative tools. Supply chain attacks exploit less-secure systems of third-party vendors, as seen in high-profile breaches like the Target attack in 2013 and the Solarwinds breach in 2020, underscoring the need for stringent security evaluations and auditable proof of standards from vendors. Additionally, the CI/CD infrastructure is vulnerable to threats like denial of service attacks and cryptocurrency mining abuses, with incidents prompting some CI providers to restrict or eliminate free tiers. To combat these challenges, organizations must maintain up-to-date tools, monitor systems for vulnerabilities, and ensure robust security practices among external partners, as the frequency and sophistication of cyberattacks continue to rise.

Mel, a new Developer Advocate at Buildkite, shares her journey from an artist to a tech community member driven by a passion for creating solutions and fostering connections. Despite her initial disinterest in computers, a pivotal experience at a RailsGirls event sparked her interest in software development, leading her to thrive in the open-source community and embrace a career in software engineering. Her role at Buildkite focuses on building relationships within the user community, understanding their challenges, and sharing solutions, driven by a desire to create a supportive and diverse environment. Mel's story highlights the transformative power of community and the importance of connecting with people who share similar passions, ultimately leading her to a role where she can leverage her experiences to help others.

Buildkite's hiring process aims to provide candidates with a comfortable, remote, and exploratory interview experience that allows them to showcase their skills and determine if the company and the role align with their career goals. The process varies depending on the role but generally includes an initial application via BeApplied or Lever, which focuses on skills rather than traditional resumes. Following this, candidates participate in a screening video call with the People team to discuss their skills and interest in the role. A second interview involves meeting potential colleagues with relevant technical expertise, and candidates are given a compensated take-home project to demonstrate their abilities in a remote work setting. The final interview is designed to further explore the candidate's approach to problem-solving and provide them with additional information about the role. If a candidate is not selected, Buildkite communicates this via email to respect different time zones and offers feedback upon request, ensuring a positive and respectful experience throughout the hiring process.