Backend Engineering & Security Intern

Intelura•,

About The Position

The Backend Engineering & Security Intern will help maintain and improve Timmy HR’s backend, database, APIs, and security as the platform supports live clients and handles sensitive employee and organizational information. The intern will work with the engineering team to test fixes before production deployment and contribute to more reliable backend services, documented database and API improvements, stronger security, and better data integrity, access control, and production stability.

Requirements

Knowledge of backend development using the stack selected by Intelura, such as Node.js and TypeScript.
Understanding of SQL and relational databases, preferably PostgreSQL.
Familiarity with REST APIs, authentication, authorization, and Git/GitHub.
Basic knowledge of OWASP security principles and secure coding practices.
A careful, methodical approach to handling production systems and data.

Responsibilities

Review existing backend code and APIs to identify bugs, weaknesses, and opportunities for improvement.
Help maintain database structure, relationships, constraints, indexes, migrations, and query performance.
Review and improve authentication, authorization, role-based access control, and tenant isolation.
Help ensure each client organization can access only its own authorized data.
Identify potential security vulnerabilities, unsafe database queries, exposed secrets, and insecure API endpoints.
Implement input validation, error handling, and appropriate server-side permission checks.
Assist with database backups, recovery procedures, migration testing, and data-integrity checks.
Monitor backend errors, investigate production issues, and help improve application reliability.
Write and maintain automated tests for critical APIs and access-control rules.
Review dependency vulnerabilities and support secure coding practices.
Document backend architecture, database changes, and security findings.
Work with the engineering team to test fixes before deploying them to production.