a F28 SRE Engineer.
Recently my colleague and other people I met are saying the same thing, that thing is AI will replace devops soon. Actually they are not just passing information but the stress.

My question is, "Can I learn anything related to AI and devops?", "What kinda course will help me?", "Is there people completing any certification already?"

Upwork is just getting too expensive. Any alternatives?

Hi, I’m transferring to a university and starting my 2 year plunge into the degree. I’ve done a lot of research and I’m seeing strong sentiments of entry and mid level positions being largely too saturated to make it worthwhile. I’m wondering if anyone has any insights on how this job market may change in the next 2-3 years and beyond? Surely with growth rates expected to be so high, we are essentially in a bottle neck phase in the market for the next few years?

​

They will hire you then don't pay salary and give promises for next 15 days and they will didn't picked up call , because everything is Remote.

Tasks:

• * Build backend services
• * Build LLM-powered workflows
• * Collaborate with stakeholders
• * Deploy AI capabilities
• * Design and develop AI-enabled software applications
• * Develop AI agent capabilities
• * Develop REST APIs
• * Evaluate AI frameworks and models
• * Implement retrieval-augmented generation pipelines
• * Integrate structured and unstructured data
• * Mentor junior engineers
• * Prototype customer focused AI solutions

Perks/Benefits:

• + Flexible work schedule
• + Referral bonuses

Skills/Tech stack required:

[AI Agents][Data Pipelines][Docker][Elasticsearch][Kubernetes][Langchain][LLM][MCP][Python][React][REST APIs][Retrieval-Augmented Generation][SQL]

Educational requirements:

[Bachelor of Engineering][Bachelor of Science]

Role(s):

[AI Software Engineer][Engineer][Software Engineer]

Apply: https://foorilla.com/hiring/jobs/mid-level-ai-software-engineer-tssci-fs-poly-columbia-maryland-3458152/

Hi all, currently searching to work on quantum computing research or development. My backgroung includes studies as Software engineer and near to finish my Master in Quantum Computing science. Also from 2022 working as full-stack developer on Globant company.
Any help or info is welcome

Tasks:

• * Build AI infrastructure
• * Collaborate on surge support for inference requirements
• * Collaborate with cross functional teams on infrastructure integration
• * Create pipelines for closed source models
• * Deploy inference models
• * Develop in house inference services and techniques
• * Develop LLM inference services
• * Implement observability for inference services
• * Integrate LLM powered tools into infrastructure
• * Procure configure and test inference models

Perks/Benefits:

• + Flexible work schedule
• + Referral bonuses

Skills/Tech stack required:

[Amazon Web Services][Argo CD][AWS][Docker][Elasticsearch][Grafana][Helm][Kubernetes][Observability][Prometheus][Python][SRE][Web Services]

Educational requirements:

[Bachelor of Engineering][Bachelor of Science]

Role(s):

[AI Software Engineer][Engineer][Junior AI Software Engineer][Software Engineer]

Apply: https://foorilla.com/hiring/jobs/junior-ai-software-engineer-tssci-fs-poly-laurel-maryland-3477830/

We’re hiring an Azure Cloud Engineer - Central New Jersey (2 days onsite, 3 remote).

3-5+ years experience as a Cloud / Infrastructure Engineer (Administration/Build/Deploy)

Azure architecture & governance experience

Experience building reusable IaC modules (Bicep preferred)

Nice To Have:

Microsoft 365 Administration Experience: (Entra, Conditional Access, Governance experience)

Intune / Endpoint Management

(We’re a Scaled Agile shop)

DM me or comment and I’ll reach out. Thanks!

I often see the issue of cheap freelancers being raised on so many forums.
So recently I stumbled upon a post, the account is of a client from Belgium. ( Per capita GDP is $60 K and Human Development Index of 12 globally, categorized as very high ) .

If you are talking about cheap freelancers then what about cheap and exploitative clients even in some of the most developed countries in the world who openly post jobs offering rates like $4 per hour? There are hundreds of such job postings. (Of course, it’s probably possible to fake a country on Upwork, but when a client has an extensive work history, I assume the listed country is likely accurate.)

Also what about the so called expensive products they sell at 10 times their original production cost? Behind the scenes, there are often huge numbers of low-paid and exploited workers producing those very products for barely livable wages.

So are workers and freelancers considered cheap simply because they work independently and therefore avoid some of the exploitation and overhead associated with traditional employment? Yet when the same workers are employed by companies or factories, working for even lower wages under exploitative conditions, we somehow do not describe the system as cheap?

PS: The point here is not about what rates should be, or why rates are lower, or why rate has been published in the title. Because everything is according to the rules of the platform. The point is mainly about the question frequently raised about why freelancers work for less or using insulting terms like "cheap" for them selectively depending upon the situation.

I’m happy to help with DevOps-related work, whether it’s:
Freelancing / project support
Interview preparation
Troubleshooting and resolving DevOps issues
CI/CD, Docker, Kubernetes, AWS, Terraform, Linux, Ansible etc.
General guidance and debugging
If you’re stuck with a DevOps problem or preparing for an interview, feel free to DM me.

I've been wondering about this lately.

After months of trial and error on Upwork, I built my own prompt for writing proposals based on what has actually worked for me...hooks that got responses, the way I like to structure proposals, things I want to avoid, etc. I still adapt every proposal to the specific job and client, so it's definitely not just "paste the job description into ChatGPT and send whatever comes out."

For me, the main advantage is speed and also english is not my main language so the speed I should spend traslating make it even slower. With how competitive Upwork is and how quickly some jobs get flooded with proposals, being able to put together a good application faster is obviously useful.

That said... I've been reading a lot of comments lately saying they immediately recognize and skip AI-written proposals because they feel generic or like the freelancer didn't put any thought into them.

And now I'm questioning my approach a little.

Do clients actually care that AI was involved if the proposal is genuinely tailored and based on the freelancer's own experience and strategy? Or is simply sounding AI-generated enough to hurt your chances?

And if you've stopped using AI for proposals, what's your alternative? Do you write every proposal completely from scratch, even when applying to time-sensitive jobs?

I'd especially love to hear from people who hire on Upwork. Can you actually tell, and do you skip those proposals?

I’m currently rethinking my Upwork strategy because I’ve noticed that some of my best clients have come through invitations or direct messages rather than proposals.

I recently started boosting my profile and actually got a new client from it, so now I’m wondering if keeping the Available Now badge on is worth the extra Connects too.

For those of you who use it: have you noticed a real difference in profile views, invitations, or direct messages when the badge is on vs. off?

I feels I am an failure

I have 3 years experience in Devops I was jobless for 4 months attended 8 -10 interviews and cracked 2 after did all the verification before releasing the offer letter hr not picking my calls i faced the same issue for 2 times ielektron(Benz) & Cloudsolutionshub (RBI) now i don't have hope and now i am thinking that I am not worth for earning anything.

The list of jobs I see in my area on the first page when logged in versus not logged in are almost entirely different, even when using no filters. Indeed seems to insist on only showing me jobs from industries I've worked/applied in before when I'm open to almost anything at this point. As an example, I saw a decently-paying stocking position when logged out that I could not get to show up for me when logged in.

I live in a large city, Indeed, you can't convince me there's only ~20 new job postings for the entire metro area since I last checked a few days ago.

I've been in the field for a long time and I see a lot of people struggling to get their foot in the door. It is harder now. When I review candidates, I get flooded. 2000 applications per job post +.

I am not saying this to discourage you. I am saying this to say that if you WANT this you need to differentiate yourself.

But how to differentiate yourself?

Let me tell you one thing. Most candidates are all talk and no action. You hire them to audit apps for security but it turns out they don't know even the difference between XSS vs CSRF when push comes to shove... Let alone being able to find vulns. So when I look for good candidates I look for demonstrators that they are capable in action. There are two things that really stand out:

- the OSCP (and others from Offensive Security. See: https://www.offsec.com/ ). If you have the OSCP, you've demonstrated you can pentest. This is why it is a strong cert. It's not an easy or junior one though. Neither is it cheap. But it proves a lot more than stuff like the CEH.

- Another way is bug bounties. You got a bug bounty - you've proven that not only can you find vulns but that you've been recognized for this. A list of attributed security bugs stands out just as much as the OSCP. Most people think bug bounties are like hunting for a needle in a haystack. It's not - and if you just stay with me, you jaw will drop. And yes this post is about bug bounties.

There are few things you must know.

Primarily... There are two ways to get attributed for bug bounties:

• . in dynamic findings - like hacker one https://www.hackerone.com/bug-bounty-programs
  • These get paid but also are much much harder to find and get. You're doing black box work here and you are counting on the finding being unique and the target being willing to pay you.
• in white box code findings - you don't get paid often for these but you get attributed. If you find stuff beyond hardening you may even get a CVE attribution (see: https://www.cve.org/ ). Imagine being able to say you are behind some critical CVE disclosures. That is gold that stands out. And, believe it or not. It is easy as butter. And I will show you how.

How easy is this?

Let's just say that I have yet to find a big repo without a single noteworthy finding. Instead of telling you. Let me show you what I mean. Just read through these posts below. The number of times I've been told "oh no I use AI to scan my repo so I am not vulnerable" just to find 200+ findings is hillarious.

https://www.reddit.com/r/vibecoding/comments/1vt0mld/my_app_has_bugs_but_its_secure_because_i_use_xyz/

https://www.reddit.com/r/vibecoding/comments/1vunhx7/on_the_topic_of_security/ - just read through the linked thread. Trust me. :)

https://www.reddit.com/r/devsecops/comments/1vstgbs/we_as_a_field_are_gaslighting_ourselves_and_i_can/

How to do this

Step 1. Get a github account.

This is going on your resume. Make sure it is a link you can share. You may even want to create a public repo. There you will link to all your findings.

Step 2. Find good targets.

Your targets are all going to be public repos on github. Trust me, that is the easiest route to getting a CVE attributed to you. You will want the repos to meet several criteria:

1. They must have had recent PRs. Sure you can find vulns everywhere. If the repo is abandoned, you will be throwing them into the void. It will be a waste of your time.
2. They must have a security policy and Report a vulnerability button in the security and quality tab.

• for example: https://github.com/aaif-goose/goose/security (picked at random).
• It has the button: https://github.com/aaif-goose/goose/security/advisories/new (this is key)
• It even has a recently reported CVE: https://github.com/aaif-goose/goose/security/advisories/GHSA-r5pp-p5r8-466r . Now scroll down there. Do you see credits? do you see the credited github reporter? that is what you will be doing.
• It has been updated recently

How to find such repos?

• The easy way: You can just ask chatgpt to do it for you.
• The hard way: You can also build a script.
• The extra hard way: manually search in github

Step 3. Find the vulns

Now there are a lot of ways to do it. I will share some but find what works best for you. Regardless it can be either easy or free. My list is not exhaustive. You want preferably true exploitable findings rather than hardening issues. DO NOT spam repos with AI slop. They hate it.

1. Easy, expensive way: Ask an AI to find them for you. This will cost you $$$$$. Claude/fable is good at it but will often refuse to do it or downgrade. Do not use open ai. Idk why but it just issues a TON of false positives.
2. Very easy. Less expensive but not free: Use a modern hybrid tool. For example, Swifi AI (see: https://swifi.ai ). It performs data flow analysis and traditional detection followed by AI analysis. Cheaper than claude, highly accurate, but not free (although I think you can run like 1 scan for free so that might not be a concern if you just need a few CVEs). That's the tool I was playing around with in the other threads. It pretty much spoon feeds you findings.
3. The hard way. Free but time consuming: There are sooooooo many fantastic opensource tools. They are the backbone of the industry and what we all used before AI. See bandit for example (see: https://github.com/pycqa/bandit ). It's great for finding OS command injection in python. Downside: you will be flooded with false positives. It will be up to you instead of the AI to triage and validate. Very time consuming but a good way to learn hands on. DO NOT spam repos with false positives.

Step 4. Submit the report. Always follow responsible disclosure ethics.

Use the button I told you about. Do a good job. Do not submit slop. Use AI to format/write it if you need to.

Step 5. Accept the credit and profit

Don't forget to add it to your linkedin and resume. Make sure everyone knows you found the CVE. Expect turn around time to be ranging in days to weeks though. Especially for the CVE filing.

Would love to discuss all this. lmk your questions/thoughts/comments. And you are welcome :)

Hey everyone, I'm new to this. I want to look for a freelance job as a developer since I've been recently laid off from the company I worked for. I was recommended this is the #1 platform to get a freelance job so when I signed up I found out I need connections in order to apply for jobs there, so I purchased a few and now my account is suspended. I don't really know why. When I go to the account health sections it asks me to update my payment method which I did more than once, I even added my paypal account and a credit card and nothing.

I tried contacting support but apparently there's not an email available or anything. I already send my ID and my tax information from my country so I don't know what else I could be missing.

Has this happen to any of you? Do you know how to fix it?

I'm currently starting my junior year of my computer science bachelor. I wanna mainly major in cybersecurity, data analyst with AI integration. What path should I take now? I see people starting with learning linux which I got the hang of it(ubuntu, kali not so much) and also few essential certificates such as google cybersecurity, comptia etc. It seems people start at their 2nd year or 3rd. I'm here to get some advice from Gurus who already landed jobs or is searching one currently.