Verified IT Work Experience Program

Cloud Security Engineering & DevSecOps Automation Internship

Master shift-left security, SAST/DAST, SBOM supply-chain security, container security, Kubernetes hardening, and HashiCorp Vault on AWS.

3 - 6 Months
Online / On-site
Experience Letter + LOR
1-on-1 Lead Mentorship
Apply for Internship Download Brief

Role Overview

Step into the role of a Cloud Security & DevSecOps Engineer. In this intensive internship, you will architect and automate security across live cloud infrastructure. Working under senior security leads, you will build automated pre-commit secret scanning, implement SAST/SCA security gates, enforce policy-as-code with OPA across Terraform templates, harden production Kubernetes clusters, rotate secrets with HashiCorp Vault, and monitor runtime threats with Falco eBPF.

Tools & Stack You Will Use

DevSecOps Pipelines SAST & DAST (Semgrep / ZAP) SCA & SBOM (Trivy / CycloneDX) IaC Security (Checkov / tfsec) Policy as Code (OPA Rego) Kubernetes Hardening & PSS HashiCorp Vault Secret Rotation Runtime Threat Defense (Falco / eBPF)

What You Will Receive

  • Verified Experience Certificate: Company-issued credential recognizing duration.
  • Letter of Recommendation (LOR): Signed recommendation from tech lead for top performers.
  • Production GitHub Repos: Live pull requests, commits, and verified public repositories.
  • Interview & Placement Support: Direct client interview opportunities & referrals.

Eligibility & Candidates

  • Final year & pre-final engineering/IT students
  • Fresh graduates looking for company experience
  • Career switchers seeking real-world portfolios

Commercial Projects You Will Build

Real-world product blueprints and enterprise deliverables

1 Shift-Left Security & Pre-Commit Automated Defense

Live Milestone
  • The DevSecOps paradigm: Overcoming security bottlenecks in high-velocity agile delivery
  • Automated secrets detection: Configuring Gitleaks, TruffleHog, and pre-commit Git hooks
  • Static Application Security Testing (SAST): Writing custom Semgrep rules for code flaw detection
  • Software Composition Analysis (SCA): Scanning open-source libraries with Snyk and Trivy
  • Software Bill of Materials (SBOM): Generating and verifying CycloneDX and SPDX manifests

2 Infrastructure as Code (IaC) Security & Policy as Code

Live Milestone
  • Auditing cloud infrastructure templates: Terraform, AWS CloudFormation, and AWS CDK
  • Automated IaC scanning using Checkov, tfsec, and KICS to block cloud misconfigurations
  • Policy as Code with Open Policy Agent (OPA): Writing declarative security policies in Rego
  • Enforcing least-privilege IAM policies, S3 encryption enforcement, and private VPC gateways
  • Integrating IaC security gating into GitHub Actions and GitLab CI build pipelines

3 Container Security & Supply Chain Cryptography

Live Milestone
  • Container image hardening: Multi-stage Docker builds, Alpine and Distroless minimal runtimes
  • Dropping root privileges and configuring non-root user execution inside containers
  • Continuous vulnerability scanning in Amazon ECR and Harbor using Trivy and Amazon Inspector
  • Cryptographic image signing and provenance verification using Sigstore Cosign and In-Toto
  • Automating binary authorization to block untrusted container images from running in production

4 Kubernetes Hardening & Admission Control Governance

Live Milestone
  • Kubernetes security boundaries: API server security, RBAC authorization, and audit logging
  • Enforcing Pod Security Standards (PSS): Privileged, Baseline, and Restricted profiles
  • Dynamic Admission Controllers: Validating and mutating webhooks with Kyverno and OPA Gatekeeper
  • Micro-segmentation: Isolating pod-to-pod network traffic using Calico and Cilium NetworkPolicies
  • Container isolation technologies: gVisor sandboxing and Kata Containers architecture

5 Zero-Trust Secrets Management with HashiCorp Vault

Live Milestone
  • The anti-pattern of static API keys: Centralized secret governance architectures
  • Deploying and unsealing HashiCorp Vault clusters on cloud infrastructure
  • Dynamic secrets engines: On-demand database credentials with automated TTL expiration
  • Kubernetes authentication engine: Injecting secrets via Vault Sidecar and CSI Driver
  • Automating PKI certificates: Dynamic TLS certificate issuance with cert-manager

6 Runtime Threat Detection & Cloud SIEM Telemetry

Live Milestone
  • Kernel-level runtime observability: eBPF architecture and system call interception
  • Deploying Falco for real-time container threat detection and anomalous behavior alerts
  • Centralized security analytics: Ingesting security telemetry into AWS Security Hub and GuardDuty
  • Automating incident response workflows: Triggering AWS Lambda containment playbooks
  • Commercial Capstone Defense: Production-Ready Multi-Tier DevSecOps Pipeline with Zero CVE Footprint

Agile Work Culture & Daily Routine

How you collaborate inside your developer pod each week

1

Daily Standups & Sprints

Participate in 15-minute morning standups, track sprint backlog items in Jira, and define daily feature goals.

2

Feature Engineering

Write clean, modular code following design patterns, database migrations, and API contract specifications.

3

PR Reviews & Quality Gates

Submit GitHub pull requests, receive 1-on-1 feedback from senior tech leads, and pass automated CI test pipelines.

4

Cloud Staging & Demo

Deploy live containerized features to cloud staging environments and demonstrate working software during sprint reviews.

Local Internship Campuses & Dev Centers

In-person & hybrid developer seats in Coimbatore & Chennai

Coimbatore • Internship

DevSecOps & Cloud Security Engineering
Chennai • Internship

DevSecOps & Cloud Security Engineering
Coimbatore • Internship

Cloud Security Engineering & DevSecOps
Chennai • Internship

Cloud Security Engineering & DevSecOps
Limited Seats Per Batch

Start Your Professional Journey Today

Join our Cloud Security Engineering & DevSecOps Automation Internship and gain verified company work experience, senior mentorship, and a production-grade portfolio.

Apply for Internship Explore All Tracks