DevSecOps Engineer Internship

Overview: Securing the CI/CD Pipeline The DevSecOps Engineer is responsible for automating, integrating, and enforcing security controls throughout the entire development lifecycle, from code commit to production deployment. You will be the vital link between Development, Security, and Operations, ensuring that the continuous integration and delivery pipelines for our e-commerce platform, internal tools, and AI agents are secure by design. Internship Details Duration: 3 months Start Date: Immediate Location: Remote Stipend: None initially. Based on your first-quarter performance, you may be offered a paid full-time opportunity, or even be absorbed directly by the client as an FTE. Key Responsibilities & Core Projects You will embed security into the automation processes across the entire tech stack. Security Automation (CI/CD): Integrate automated security scanning tools, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), directly into our CI/CD pipelines (managed via Makefile and automated testing pipelines). Infrastructure Security: Enforce secure Infrastructure-as-Code (IaC) practices using Terraform for provisioning and managing our Oracle Cloud Free VMs. Continuously monitor the cloud infrastructure for vulnerabilities and misconfigurations. Container and Runtime Security: Manage and secure the application deployment environment by implementing robust container security policies for Docker and ensuring runtime threat