DevSecOps Internship

Description

DESCRIPTION Are you passionate about cybersecurity and seeking an opportunity to grow professionally in a dynamic and innovative environment? At Kairós, we invite you to join our Security and Infrastructure team, where you will have the opportunity to participate in the development and implementation of real-world technological solutions that impact both internally and our clients—collaborating with Kairós professionals and fellow students from various universities. We are looking for motivated individuals who wish to apply their knowledge in a practical setting while continuing their training, and who are open to joining Kairós upon completion of the internship. **ABOUT KAIRÓS** At Kairós, we work alongside diverse companies to support their digital transformation. We act as technology leaders, creating digital products and delivering solutions that add value for users worldwide. We are an international organization with offices in Spain and the Americas. We strongly believe in people—providing personalized technical and individual mentoring by our Heads and our Talent team. At Kairós, you can complete your curricular and extracurricular internships to complement your education in software development and emerging technologies. Join our teams to complete your training through these internships in a multidisciplinary environment, coordinated by our experts—either remotely from home or at our Madrid offices. **TASK DESCRIPTION** Within Kairós’ technology discipline—and specifically alongside the cybersecurity team—you will carry out the following responsibilities: * **Security Monitoring and Control** * Security log monitoring. * Vulnerability analysis. * Security incident management. * Review of security policies. * **Maintenance of Kairós’ Infrastructure:** * Operating system and application updates. * Security patch management. * Data backup and restoration. * Firewall configuration and management. * **Design and Implementation of Secure CI/CD Pipelines:** * Integration of static (SAST) and dynamic (DAST) security analysis tools into the pipeline. * Automation of security testing. * Secret and credential management. * Secure application deployment. * Automation, monitoring, and optimization of infrastructure within a highly scalable production environment. * Infrastructure status monitoring. * Application deployment on Kubernetes. * Service and machine updates. * Cloud service management (AWS, GCP, Azure). * Maintenance of the corporate GitLab instance. Additionally, as a member of Kairós’ cybersecurity team, you will help maintain the information security system in accordance with international standards such as ISO/IEC 27001:2022, or national regulations including Royal Decree 311/2022 of May 3rd, which establishes the National Security Scheme. Finally, you will engage in research, proposal, and implementation of initiatives including: * Drafting of the security policy, * Implementation of security controls, * Conducting ongoing penetration testing and attack simulations to identify and mitigate vulnerabilities, * Developing training and awareness programs. **RELATED TECHNOLOGIES** * Programming skills in **shellscript** and/or **Python**. * Databases: **SQL** and NoSQL. * API communication (**REST APIs**). * Knowledge of **AWS, GCP, Azure, Proxmox** infrastructure. * Kubernetes, Docker. * GitLab, ArgoCD. * Monitoring tools: CheckMK, Wazuh. **REQUIRED SKILLS AND ATTRIBUTES** * Positive attitude. * Good command of English. * Ability to ask questions, analyze, and solve problems. * Capacity to design solutions to such problems and present (defend) them effectively. * Teamwork. * Initiative, autonomy, motivation, and eagerness to learn