Cloud Security Automation Intern (AWS)

Security at a company our size is mostly plumbing, not war rooms, and over this six month internship you will do the plumbing that keeps our AWS account defensible. The team works out of Andheri, with three days on site each week.

Where you start

An access audit. You will inventory every IAM role and policy we have accumulated, flag the wildcards, and replace the worst offenders with scoped permissions that still let deploys succeed. It is unglamorous and it matters more than anything else on this list.

Where you end up

Automating those checks so they never rot again. That means wiring AWS Config rules and a secrets scanner into the GitHub Actions pipeline, rotating credentials on a schedule with Secrets Manager, and building a weekly report that tells the team what changed in the account and who changed it. You will also help us answer our first serious customer security questionnaire.

Fit

You need Linux and networking fundamentals, familiarity with the AWS console, and enough Python to write a boto3 script from the documentation rather than copying one wholesale. We are hiring a student or recent graduate, so no certifications or prior roles are expected. Care is expected, because in this corner of the work a careless change is expensive.