23 hours ago
Brussels, BelgiumIntern
Responsibilities
- Analyze the internal Continuous Threat Modeling toolbox architecture and identify opportunities for agentic functionality.
- Research and select policy-as-code frameworks, standards, and engines.
- Design and build a generalized, pluggable policy-as-code database with framework traceability and metadata.
- Implement AI-assisted functionality using NVISO’s internal LLM with prompt design, tool-calling, and safety guardrails.
- Validate policies against sample IaC and test agent outputs for reliability and regressions.
- Document the architecture, usage, extension roadmap, agent design, guardrails, and limitations.
- Present findings and a live end-to-end demonstration to NVISO’s Application Security team.
Requirements
- Currently pursuing a degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
- Programming skills in Python or a similar scripting language.
- Familiarity with Infrastructure-as-Code such as Terraform or Kubernetes and/or policy-as-code tooling such as OPA/Rego, Checkov, tfsec, or Sentinel.
- Basic understanding of CI/CD concepts.
- Interest in application security, cloud security, DevSecOps, or AI/LLM-based automation.
- Analytical, structured, independent, and collaborative working style.
- Familiarity with compliance or security frameworks such as CIS Benchmarks or NIST is a plus.
- Experience with GitHub Actions or GitLab CI is a plus.
- Prior exposure to prompt engineering, tool-calling, or LLM agent design is a plus.
Benefits
- Hybrid working model in Brussels, Belgium.
- Minimum three-month unpaid internship starting from February 2027.
- Dedicated NVISO mentor throughout the internship.
- Internship must be part of the academic programme and covered by a university internship agreement.
- Must be eligible to work in Belgium and meet the assignment’s eligibility conditions.
- Successful completion may lead to further opportunities at NVISO after graduation, depending on mutual fit and available positions.
Tech Stack
Categories
About NVISO
NVISO is a Brussels-based cybersecurity services firm founded in 2013. It delivers penetration testing, digital forensics and incident response, security monitoring and threat hunting, governance/risk/compliance, adversary emulation, and ICS security to private companies and government agencies. The company operates as a privately held partnership and serves clients across Europe, including teams in Belgium and Germany.