[Hiring] Security Engineering Intern @Super.com

Role Description

We are looking for a Security Engineering Intern to join our team. Duties and responsibilities include:

• Participate in securing our product by catching application-level vulnerabilities in our web apps and APIs
• Deploy and maintain DevSecOps tools such as Trivy, Bandit, or GitLeaks as part of our CI/CD pipelines
• Implement least-privileged access policies for our secrets using Hashicorp Vault
• Help investigate automated security alerts
• Implement and maintain audit log pipelines from our internal tools and external vendors
• Work with cutting edge infrastructure tools like AWS, Docker, Kubernetes, Terraform, and Helm
• Implement identified fixes for software vulnerabilities
• Build and integrate security tooling by writing basic Python scripts and applications

Qualifications

• You’ve seen how to take advantage of vulnerable web apps and APIs, and you would like to patch them
• You’ve performed testing with some variation of security tooling (whether it be Burp Suite, Fiddler, Wireshark, etc.)
• You have excellent knowledge of how networked services in the cloud work: VPC, IP, TCP, DNS, HTTP, etc.
• You can use critical thinking skills to determine the impact and severity of the identified vulnerability to our organization

Requirements

• Term: This internship is for the Fall Term: September 8th - December 18th 2026
• Candidates can be based anywhere in Canada, provided they maintain a minimum 6-hour overlap with the Eastern Time Zone and are available to work a 40-hour work week.

Benefits

• Home Office Setup Allowance: $300 one-time
• Friday UberEats Allowance: $25/week
• Learning & Development Allowance: $300/ per term
• Fitness/Wellness Allowance: $120/per term