DevSecOps Intern at ePayPolicy in Austin, TX

Summary: ePayPolicy is a company that helps insurance companies streamline their payment processes. The DevSecOps Intern will work closely with the Security Operations Center to automate security controls, secure cloud infrastructure, and implement security measures in the software delivery lifecycle. Responsibilities: - Gain familiarity with ePayPolicy’s application architecture and cloud infrastructure (Azure) to identify potential security enhancements - Monitor and analyze findings from automated security testing tools (SAST/DAST/SCA) within our CI/CD pipelines to identify valid vulnerabilities - Collaborate with the SOC team to improve alert fidelity and automate incident response actions using scripting (Python, Bash, or Go) - Review and analyze vulnerability scan results, working with engineering teams to track remediation efforts - Conduct internal vulnerability assessments or targeted validation tests to validate security controls and verify that patches are effective - Help design and implement automated compliance checks for industry standards such as PCI DSS 4.0 and SOC 2 - Monitor cloud environments for configuration drift and assist in enforcing Zero Trust principles across the organization - Create and update technical documentation for security tooling, workflows, and automation scripts - Participate in security code reviews and assist developers in understanding best practices for secure coding Required Qualifications: - A background in Computer Science, Cybersecurity, or Information Systems—whether you are currently pursuing a degree, possess equivalent self-taught skills, or are a developer looking to transition into the security field - Demonstrated understanding of DevOps principles, version control (Git), and CI/CD pipelines through coursework, labs, or personal projects - Proficiency in at least one scripting or programming language (Python, Bash, JavaScript, or Go) – you should be comfortable writing scripts to automate tasks - Working knowledge of cloud computing services (specifically Microsoft Azure) and containerization concepts (Docker) - Solid foundation in networking concepts (TCP/IP, DNS, HTTP) and operating system security (Linux/Windows) - A strong interest or passion for penetration testing and DevSecOps methodologies, with a desire to learn how to break and secure modern applications - A proactive, problem-solving mindset with a passion for automation and cybersecurity - Strong communication and interpersonal skills, with the ability to explain technical security concepts to various stakeholders - Ability to work independently and prioritize tasks in a fast-paced, agile environment Required Skills: Azure, Python, CI/CD pipelines Important Skills: DevOps principles, Scripting, Networking concepts, Operating system security Nice-to-Have Skills: Penetration testing, Problem-solving, Communication skills Benefits: Company Holidays, In-office perks (Daily lunch stipend, access to the onsite gym, and two fully-stocked kitchens), Company provided laptop, Open invite to company-events, Company swag, Comprehensive benefits package with employer-paid basic life and disability premiums, 401K, Unlimited PTO, Company-sponsored quarterly “ePayItForward” initiatives, Supportive and inclusive company culture with a focus on work/life balance, Fully-stocked kitchen, Lunch stipend when working onsite