Posted 2d ago
Cloud Security Automation Intern (AWS)
Posted 1mo ago10+ already applied
What this role pays, in context
This listing does not state its pay. DevOps Engineer roles in India currently advertise a median of ₹6.2L a year.
25th pct ₹4.9L75th pct ₹6.8L
Median of 18 other live DevOps Engineer listings in India on this board that state pay. Roles that do not disclose a salary are excluded rather than counted as zero.
Security at a company our size is mostly plumbing, not war rooms, and over this six month internship you will do the plumbing that keeps our AWS account defensible. The team works out of Andheri, with three days on site each week.
Where you start
An access audit. You will inventory every IAM role and policy we have accumulated, flag the wildcards, and replace the worst offenders with scoped permissions that still let deploys succeed. It is unglamorous and it matters more than anything else on this list.
Where you end up
Automating those checks so they never rot again. That means wiring AWS Config rules and a secrets scanner into the GitHub Actions pipeline, rotating credentials on a schedule with Secrets Manager, and building a weekly report that tells the team what changed in the account and who changed it. You will also help us answer our first serious customer security questionnaire.
Fit
You need Linux and networking fundamentals, familiarity with the AWS console, and enough Python to write a boto3 script from the documentation rather than copying one wholesale. We are hiring a student or recent graduate, so no certifications or prior roles are expected. Care is expected, because in this corner of the work a careless change is expensive.
Responsibilities
- Inventory every IAM user, role and policy in production and flag wildcard permissions
- Replace over broad policies with scoped permissions without breaking deployments
- Wire AWS Config rules and a secrets scanner into the GitHub Actions pipeline
- Move hardcoded credentials into Secrets Manager and set up scheduled rotation
- Produce a weekly account change report for the engineering team
- Help assemble evidence for our first customer security questionnaire
Requirements
- Final year student or recent graduate, with no security certifications needed
- Linux and networking fundamentals including DNS, TLS and firewall basics
- Familiar with the AWS console and the shape of its core services
- Enough Python to write a boto3 script from official documentation
- Methodical and careful when changing shared environments
Skills
Benefits
- Monthly stipend at the top of our internship band
- Six month runway to actually finish something substantial
- Security focused mentorship from the infrastructure lead
- Certificate and a written reference you can share with recruiters
- Clear path to a full time offer for strong performers