DevSecOps Engineer Internship

Responsibilities

• You will embed security into the automation processes across the entire tech stack.
• Security Automation (CI/CD): Integrate automated security scanning tools, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), directly into our CI/CD pipelines (managed via Makefile and automated testing pipelines).
• Infrastructure Security: Enforce secure Infrastructure-as-Code (IaC) practices using Terraform for provisioning and managing our Oracle Cloud Free VMs. Continuously monitor the cloud infrastructure for vulnerabilities and misconfigurations.
• Container and Runtime Security
• Manage and secure the application deployment environment by implementing robust container security policies for Docker and ensuring runtime threat detection and logging for production services.
• Collaboration & Remediation
• Collaborate directly with development teams to promote secure coding practices, provide guidance on vulnerability remediation, and ensure security findings are addressed before deployment.
• Secrets Management
• Implement automated injection and rotation of secrets using Vault into the applications and deployment environment.
• Observability Integration: Integrate security logs and metrics into the observability stack (Prometheus, Grafana, Loki) to ensure real-time security monitoring and alerting.

Languages