Work Across
Get started
All jobs
Save

Security Engineer Internship

Metasys
Contract type
One-time
Work mode
Remote
Experience
Junior / entry level · Not stated

Level inferred from job title

Job description

Security Engineer internship focused on securing an integrated supply chain e-commerce platform, from the Next.js frontend and NestJS backend to cloud infrastructure. The role covers vulnerability assessment, compliance enforcement (PCI-DSS, GDPR), access control, secrets management, abuse prevention, incident response, and AI agent security.

At a glance

Employment
Internship
Work mode
Remote

What you'll do

  • Perform vulnerability assessments, code reviews, and threat modeling for all new features and systems, focusing on the MES → WMS → OMS business process flow
  • Lead the implementation and auditing of security controls necessary for PCI-DSS compliance (Payment module) and GDPR compliance (user/tenant data handling)
  • Implement and manage secure API authentication methods, including OAuth 2.0 and SAML, utilizing Authentik/Ory Kratos and leveraging PostgreSQL Row-Level Security (RLS) for tenant isolation
  • Manage secrets and key rotation using Vault, define and enforce encryption protocols for data in transit and at rest, and manage certificates via Traefik
  • Implement and monitor controls for API rate limiting, Web Application Firewall (WAF) rules, and traffic monitoring to prevent abuse and denial-of-service attacks
  • Develop and practice incident investigation and response protocols
  • Conduct security awareness training for development and operations teams
  • Establish security boundaries for AI agent interfaces, ensuring agents (built with LangChain/AutoGen) operate within strict permissions when accessing supply chain data (WMS, OMS)
  • Implement validation and sanitization techniques to mitigate prompt injection and data exfiltration risks in user-facing LLM interactions

What we're looking for

  • Hands-on security experience with Node.js/NestJS security best practices, Next.js/React security, and PostgreSQL RLS
  • Experience with PCI-DSS and GDPR controls and auditing
  • Experience with OAuth 2.0, SAML, JWT, and Authentik/Ory Kratos
  • Experience with HashiCorp Vault, Docker, and Terraform
  • Experience with tools for Static/Dynamic Application Security Testing (SAST/DAST)

Your team

Supply Chain Security and Compliance

Reports to the Solution Architect or Head of Technology, working closely with the development and DevOps teams to embed security into the CI/CD pipeline.

Apply

Save