Cloud Security and IAM Internship

Why security matters here

A job board holds resumes, phone numbers and employment history, which makes our S3 buckets and IAM policies more interesting to strangers than we would like. This six month internship in Mumbai puts you on the work of tightening that surface, one finding at a time.

Your first ninety days and beyond

You will begin with an audit: every IAM user, role and policy listed, over permissive wildcards flagged, and unused access keys rotated or removed. From there you will help move service credentials out of environment files and into AWS Secrets Manager, add least privilege roles for the CI pipeline so GitHub Actions can deploy without a long lived key, and turn on GuardDuty and CloudTrail with alerts that reach a human. In the second half you will run dependency and container image scans on every build and write up the remediation plan for what they find.

The arrangement

This position is unpaid, and in exchange we make sure you leave with something real: supervised time in a live AWS account, a mentor from the platform team, and a written recommendation based on actual work. Open to final year students and recent graduates with no professional background required.