Skip to content

Open nowPosted 325 days ago

DevSecOps Engineer Internship

metasysglobal25 open roles

Where
International
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps Engineer Internshipmetasysglobal · International
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on metasysglobal's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 325 days ago

The posting

Overview: Securing the CI/CD Pipeline

The DevSecOps Engineer is responsible for automating, integrating, and enforcing security controls throughout the entire development lifecycle, from code commit to production deployment. You will be the vital link between Development, Security, and Operations, ensuring that the continuous integration and delivery pipelines for our e-commerce platform, internal tools, and AI agents are secure by design.

Internship Details

Duration: 3 months Start Date: Immediate Location: Remote Stipend: None initially. Based on your first-quarter performance, you may be offered a paid full-time opportunity, or even be absorbed directly by the client as an FTE.

Key Responsibilities & Core Projects

You will embed security into the automation processes across the entire tech stack.

  • Security Automation (CI/CD): Integrate automated security scanning tools, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), directly into our CI/CD pipelines (managed via Makefile and automated testing pipelines).
  • Infrastructure Security: Enforce secure Infrastructure-as-Code (IaC) practices using Terraform for provisioning and managing our Oracle Cloud Free VMs. Continuously monitor the cloud infrastructure for vulnerabilities and misconfigurations.
  • Container and Runtime Security: Manage and secure the application deployment environment by implementing robust container security policies for Docker and ensuring runtime threat detection and logging for production services.
  • Collaboration & Remediation: Collaborate directly with development teams to promote secure coding practices, provide guidance on vulnerability remediation, and ensure security findings are addressed before deployment.
  • Secrets Management: Implement automated injection and rotation of secrets using Vault into the applications and deployment environment.
  • Observability Integration: Integrate security logs and metrics into the observability stack (Prometheus, Grafana, Loki) to ensure real-time security monitoring and alerting.

Required Technologies & Tools

Candidates must have strong hands-on experience in both DevOps automation and security implementation:

  • Automation/CI/CD: Makefile, automated testing, scripting (Bash/Python/Node.js).
  • Security Tools: SAST/DAST tools, vulnerability scanners, runtime protection.
  • Infrastructure: Terraform (IaC), Docker, Oracle Cloud/equivalent IaaS.
  • Security & Auth: Vault (Secrets Management), Traefik (Edge Security), Observability stack (Prometheus, Loki).
  • Codebase: Experience securing applications built with Node.js/NestJS and Next.js/React/TypeScript.

AI Agent Focus

You will ensure the secure deployment and operation of our AI layer.

  • Secure Deployment: Implement dedicated, hardened deployment pipelines for AI agents (built on LangChain/LlamaIndex), isolating them and controlling their access to core supply chain data (MES, WMS, OMS).
  • Runtime Monitoring: Establish specific security logging and monitoring for LLM-related services to detect unusual access patterns or potential data leakage.

Success Metrics & Career Path

Performance will be measured by:

  • Pipeline Security: Percentage of security checks automated and integrated into the CI/CD pipeline.
  • Vulnerability Reduction: Measurable reduction in critical and high-priority findings in production and pre-production environments.
  • Compliance: Successful auditing and enforcement of secure IaC and container security policies.

Mentorship Structure: Reports to the Solution Architect or DevOps Lead, working directly with infrastructure and development teams to implement security-as-code.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against metasysglobal's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on metasysglobal's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    metasysglobal's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.