5 days ago
Responsibilities
- Build and improve security controls in CI/CD pipelines, including static analysis, secrets scanning, dependency checks, and automated policy enforcement.
- Develop developer-facing security tooling such as linting rules, reusable workflows, automation, and guardrails.
- Help secure Kubernetes and containerized workloads through access controls, image security, workload configuration, and deployment policies.
- Contribute to Terraform and Infrastructure-as-Code security baselines covering IAM, networking, encryption, and secure defaults.
- Identify cloud misconfigurations and improve security visibility across AWS, GCP, or Azure.
- Automate detection and remediation of common security issues.
- Participate in threat modeling, code reviews, and architecture discussions with security and platform engineers.
- Translate security findings into practical, actionable fixes and improve documentation and tooling adoption.
Requirements
- Be a current undergraduate junior or senior pursuing a degree in Computer Science, Engineering, Cybersecurity, or a related technical field.
- Have strong software engineering fundamentals gained through coursework, internships, research, or personal projects.
- Have programming experience in Python, Go, Java, C++, Bash, or a similar language.
- Have exposure to or strong interest in application security, platform security, cloud security, or infrastructure security.
- Be familiar with or interested in learning Kubernetes, Docker, Terraform, GitHub Actions, and AWS, GCP, or Azure.
- Be interested in software delivery from code to production, including containers, cloud infrastructure, and deployment workflows.
- Preferred experience includes cloud security, Kubernetes, Infrastructure-as-Code, secrets management, IAM, authentication and authorization systems, developer tooling, or automation.
- Preferred familiarity includes OPA, Conftest, Kyverno, Trivy, Semgrep, software supply chain security, image signing, SBOMs, or secure build pipelines.
Benefits
- Winter/Spring co-op runs from January 11, 2027 through April 30, 2027.
- Competitive co-op compensation.
- Hands-on mentorship from experienced security, platform, and infrastructure engineers.
- Opportunity to work on real production systems used globally.
- Potential return-offer consideration for future internships or full-time roles.
- Daily lunches if onsite.
Tech Stack
Categories
About Brain Co.
We're building an AI platform and applications for the world's most important institutions. Learn more at https://brain.co/
