Security Engineering Intern

Super.com

6d•Remote

About The Position

Interning at Super.com is an exciting chance to dive into the world of tech and startups, work on real projects, and learn a ton along the way. From day one, interns are fully part of the team - contributing to work that actually ships and gets used. It’s a fast-moving yet super supportive environment where you’re encouraged to ask questions, try new things, and grow through hands-on experience. Many interns say it’s the most they’ve learned in such a short time! Even though we’re remote, the culture is fun, collaborative, and well-connected- you’ll be included in team meetings, Slack chats, and social events, so you’ll never feel like you’re doing this alone.

Requirements

You’ve seen how to take advantage of vulnerable web apps and APIs, and you would like to patch them
You’ve performed testing with some variation of security tooling (whether it be Burp Suite, Fiddler, Wireshark, etc.)
You have excellent knowledge of how networked services in the cloud work: VPC, IP, TCP, DNS, HTTP, etc.
You can use critical thinking skills to determine the impact and severity of the identified vulnerability to our organization

Responsibilities

Participate in securing our product by catching application-level vulnerabilities in our web apps and APIs
Deploy and maintain DevSecOps tools such as Trivy, Bandit, or GitLeaks as part of our CI/CD pipelines
Implement least-privileged access policies for our secrets using Hashicorp Vault
Help investigate automated security alerts
Implement and maintain audit log pipelines from our internal tools and external vendors
Work with cutting edge infrastructure tools like AWS, Docker, Kubernetes, Terraform, and Helm
Implement identified fixes for software vulnerabilities
Build and integrate security tooling by writing basic Python scripts and applications