Software Engineering Intern - Security
Job Summary
Job Description
Super.com seeks a Security Engineering Intern to contribute to product security. Responsibilities include identifying and patching application-level vulnerabilities in web apps and APIs, deploying and maintaining DevSecOps tools (Trivy, Bandit, GitLeaks), implementing least-privileged access policies with Hashicorp Vault, investigating security alerts, and managing audit log pipelines. The role involves working with AWS, Docker, Kubernetes, Terraform, and Helm. Candidates should have experience with security testing tools and a strong understanding of networked cloud services.
Must have:
- Identify and patch application vulnerabilities
- Deploy and maintain DevSecOps tools
- Implement least-privileged access policies
- Investigate security alerts
- Manage audit log pipelines
- Experience with security testing tools
- Understanding of cloud services (VPC, IP, TCP, DNS, HTTP)
Good to have:
- Terraform and Helm
- Datadog
- Postgres and Redis
- Gitlab CI/CD
- Python, Bash, Docker
15 skills required
Job Details
About Super.com
We started Super.com to help maximize lives–both the lives of our customers and the lives of our employees– so that everyone can experience all that life has to offer. For our employees, our promise is that Super.com is more than just a job; it’s an opportunity to unlock one’s potential, where learning is celebrated and impact is realized.
We are more than a fast-paced, high-growth tech company; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.
About the Role
We are looking for a Security Engineering Intern to join our team. Duties and responsibilities include:
- Participate in securing our product by catching application-level vulnerabilities in our web apps and APIs
- Deploy and maintain DevSecOps tools such as Trivy, Bandit, or GitLeaks as part of our CI/CD pipelines
- Implement least-privileged access policies for our secrets using Hashicorp Vault
- Help investigate automated security alerts
- Implement and maintain audit log pipelines from our internal tools and external vendors
- Work with cutting edge infrastructure tools like AWS, Docker, Kubernetes, Terraform, and Helm
About You
- You’ve seen how to take advantage of vulnerable web apps and APIs, and you would like to patch them
- You’ve performed testing with some variation of security tooling (whether it be Burp Suite, Fiddler, Wireshark, etc.)
- You have excellent knowledge of how networked services in the cloud work: VPC, IP, TCP, DNS, HTTP, etc.
- You can use critical thinking skills to determine the impact and severity of the identified vulnerability to our organization
- Terraform and Helm
- Datadog for logging, monitoring, and alerting
- Postgres for storage and Redis for caching
- Gitlab for version control and CI/CD
- Python, Bash, and Docker for local development workflows and CI/CD jobs
Our Stack
- Amazon Web Services
- Tens of containerized microservices written in Python and/or JS processing a total of 15k+ requests per second
- Kubernetes for deploying services
- Infrastructure as Code in Terraform and Helm
- Datadog for logging, monitoring, and alerting
- Postgres for storage and Redis for caching
- Gitlab for version control and CI/CD
- Python, Bash, and Docker for local development workflows and CI/CD jobs
We Believe in Equal Opportunity
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Accommodations are available on request for candidates taking part in all aspects of the selection process. If needed, please notify our Talent Acquisition Partner.
Similar Jobs
Rackspace Technology
United States (Remote)
• 1 Month ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
Luxoft
Abu Dhabi, Abu Dhabi, United Arab Emirates (On-Site)
• 2 Months ago
Xsolla
Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (Hybrid)
• 2 Months ago
The Walt Disney Company
San Francisco, California, United States (On-Site)
• 2 Months ago
Riot Games
Los Angeles, California, United States (On-Site)
• 3 Months ago
Extreme Network
India (Remote)
• 4 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Toronto, Ontario, Canada
Epic Games
Montreal, Quebec, Canada (On-Site)
• 1 Month ago
Unity
Montreal, Quebec, Canada (On-Site)
• 2 Months ago
Get notifed when new similar jobs are uploaded
DevOps Jobs
The Walt Disney Company
Burbank, California, United States (On-Site)
• 2 Months ago
The Walt Disney Company
California, United States (On-Site)
• 2 Weeks ago
Get notifed when new similar jobs are uploaded
