Security experience gets you hired.

Build the security skills employers hire for: the OWASP Top 10, secure authentication, cryptography, access control, and hardening production systems. Practice them hands-on in live cloud workspaces by finding and fixing real vulnerabilities, and ship every fix to a portfolio hiring managers open.

Try it live. Fix the outage below

Try it live
Fix the outage below

Live Demo
00:00
Editornginx.conf
# devops
Start your portfolio

Job-ready security skills, built on real systems. The experience AI can't fake.
Free to start, no card.

The hard truth

AI killed the side-project portfolio.

A side project used to be proof you could build. Now AI builds one in seconds - so it proves nothing, and hiring managers know it. A HeyDevJob portfolio is real systems you debugged, fixed, and kept running - not something a model spun up in seconds.

Fix any security ticket.

Production-style security tickets across the OWASP Top 10, authentication, secrets, and hardening. Pick one, build the skill in a live cloud workspace, and prove it.

Ticket Role Level Stack
Loading tickets…
Browse all tickets
The same security stack you'll touch on day one
semgrep trivy bandit gitleaks nmap sqlmap owasp jwt bcrypt passlib cryptography pip-audit python linux aws iam git
From first fix to callback

Engineers who got the call.

★★★★★

"Months of algorithm puzzles taught me nothing I could talk about in interviews. Three HeyDevJob tickets in and I had real outage stories for every behavioral question."

JK
Jamie K.
DevOps · landed SRE at a Series B
★★★★★

"The portfolio link alone got me three callbacks. Hiring managers could see exactly what I'd fixed - no need to take my word for it."

MP
Maria P.
Backend · now at a fintech
FAQ

Questions before you start.

How is this different from algorithm sites or side-project portfolios?+
Algorithm sites test puzzle-solving on synthetic problems - useful for one interview round, not for the actual job. Side projects used to prove you could build, but AI builds one in seconds now, and hiring managers know it. HeyDevJob drops you into a real production environment with real broken systems: a postgres replica that won't catch up, an nginx config returning 502s, a JWT secret leaking into logs. The operational work AI can't fake - with a portfolio at the end to show for it.
What's actually in the workspace?+
A live cloud sandbox with a real terminal, real services (postgres, redis, nginx, docker, kubernetes - whatever the ticket needs), and a real broken state set up for you. Edit code, restart services, tail logs, run kubectl get pods. It's the same environment a backend engineer at a startup would touch on day one - minus the on-call.
Do I need experience already?+
Junior tickets assume you can read code and use a terminal - one bug, one fix. Mid tickets are multi-step investigations. Senior tickets are architecture-level. Start at Junior, move up when you're ready. Most users finish their first Junior ticket in under 30 minutes.
What does the portfolio actually look like?+
A public URL like heydevjob.com/u/yourname with every fix you've shipped: ticket title, role, difficulty, tags, the date you passed the check. Look at the example portfolios in the section above - that's what hiring managers see when they click the link in your resume header.
Do you have AWS tickets?+
Yes, and they're all free. Real AWS work spread across DevOps, Backend, and Security: locking down public S3 buckets, scoping IAM policies, draining stuck SQS queues, fixing broken Lambda triggers, authoring Terraform modules. The same work highly-paid AWS engineers ship every day - and proof you can do it lands on your portfolio.
Free or paid?+
Free forever to start - 5 Junior tickets a month across all seven roles, your portfolio, everything. Pro ($20/mo) unlocks Mid and Senior tickets and unlimited monthly fixes. No credit card to sign up.
How long until I have something to show?+
Your first passing check writes to your portfolio immediately. Most engineers ship their first ticket in their first session. Three fixes in is usually enough to put the URL in your resume and start linking it in cold outreach.

Stop studying security. Start patching production.

Real security tickets, one portfolio - doing the talking before you say a word.

Start your portfolio Free to start. No card.