Posted today · be early
DevSecOps Engineer Internship
Metasys
WorldwideremotePosted 1 day ago
Skill Required
DevSecOps-EngineerCloud-Security-EngineerSecurity-EngineerDevOps-EngineerPlatform-EngineerDevSecOps-Engineer-InternDevSecOps-InternDevOps-InternshipJunior-DevSecOps-EngineerDevOps-InternCI/CDOWASPObservabilityCD pipelinesTypeScriptPrometheusautomationLangChainTerraformNext.jsNode.jssecurityTestNGPythonOracleDockerdesignDevOpsExpressReactVaultCloudShell ScriptingandGenerative AIInternship
Key highlights
- Stipend: None initially
- Experience: Strong hands-on DevOps automation and security implementation
- Location: Remote
- Duration: 3 months
- Requirement: Proficiency in Terraform, Docker, and SAST/DAST tools
- Potential for paid full-time opportunity based on performance
Role overview
The DevSecOps Engineer is responsible for automating, integrating, and enforcing security controls throughout the entire development lifecycle, from code commit to production deployment. You will be the vital link between Development, Security, and Operations, ensuring that the continuous integration and delivery pipelines for our e-commerce platform, internal tools, and AI agents are secure by design.
Responsibilities
- Embed security into the automation processes across the entire tech stack.
- Integrate automated security scanning tools, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), directly into our CI/CD pipelines (managed via Makefile and automated testing pipelines).
- Enforce secure Infrastructure-as-Code (IaC) practices using Terraform for provisioning and managing our Oracle Cloud Free VMs.
- Continuously monitor the cloud infrastructure for vulnerabilities and misconfigurations.
- Manage and secure the application deployment environment by implementing robust container security policies for Docker and ensuring runtime threat detection and logging for production services.
- Collaborate directly with development teams to promote secure coding practices, provide guidance on vulnerability remediation, and ensure security findings are addressed before deployment.
- Implement automated injection and rotation of secrets using Vault into the applications and deployment environment.
- Integrate security logs and metrics into the observability stack (Prometheus, Grafana, Loki) to ensure real-time security monitoring and alerting.
- Implement dedicated, hardened deployment pipelines for AI agents (built on LangChain/LlamaIndex), isolating them and controlling their access to core supply chain data (MES, WMS, OMS).
- Establish specific security logging and monitoring for LLM-related services to detect unusual access patterns or potential data leakage.
Requirements
- Strong hands-on experience in both DevOps automation and security implementation.
- Automation/CI/CD: Makefile, automated testing, scripting (Bash/Python/Node.js).
- Security Tools: SAST/DAST tools, vulnerability scanners, runtime protection.
- Infrastructure: Terraform (IaC), Docker, Oracle Cloud/equivalent IaaS.
- Security & Auth: Vault (Secrets Management), Traefik (Edge Security), Observability stack (Prometheus, Loki).
- Codebase: Experience securing applications built with Node.js/NestJS and Next.js/React/TypeScript.
Benefits
- Based on your first-quarter performance, you may be offered a paid full-time opportunity, or even be absorbed directly by the client as an FTE.
Additional details
- Duration: 3 months
- Start Date: Immediate
- Location: Remote
- Stipend: None initially.
- Performance will be measured by: Pipeline Security (Percentage of security checks automated and integrated into the CI/CD pipeline), Vulnerability Reduction (Measurable reduction in critical and high-priority findings in production and pre-production environments), and Compliance (Successful auditing and enforcement of secure IaC and container security policies).
- Mentorship Structure: Reports to the Solution Architect or DevOps Lead, working directly with infrastructure and development teams to implement security-as-code.
- Originally posted on Himalayas