{"id":3239095,"url":"https://alion.io/job/metasys-security-engineer-internship","title":"Security Engineer Internship","company":{"id":3856814,"name":"Metasys","domain":"metasysglobal.com","url":"https://alion.io/company/metasys","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"intern","employment_type":"internship","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":38000,"max_usd":54000,"period":"year","method":"global_role_seniority_cell","sample_n":10},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Authentik","optional":false},{"name":"AutoGen","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GDPR","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"LangChain","optional":false},{"name":"LLM","optional":false},{"name":"Nest.JS","optional":false},{"name":"Next.js","optional":false},{"name":"Node JS","optional":false},{"name":"PCI DSS","optional":false},{"name":"PostgreSQL","optional":false},{"name":"React.js","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Traefik","optional":false},{"name":"Vault","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-25T12:33:29Z","employer_posted_date":null,"last_verified_at":"2026-10-25T12:33:29Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Security EngineerOverview: Supply Chain Security and ComplianceThe Security Engineer is a critical role responsible for implementing and enforcing robust security practices across our entire integrated supply chain e-commerce platform. You will safeguard e-commerce transactions, secure internal tool integrations, and establish the trust framework for our AI agent operations, ensuring compliance with global regulatory standards like PCI-DSS and GDPR.\nInternship Details\nDuration: 3 months (extendable based on performance and project scope)\n\nStart Date: Immediate\n\nLocation: Remote\n\nStipend: Unpaid initially; may convert to a paid internship, full-time role, or even direct client absorption (FTE) based on your performance\n\nKey Responsibilities & Core ProjectsYou will secure all layers of the application, from the Next.js frontend to the NestJS modular monolith and the cloud infrastructure.\n\nSecurity Architecture & Threat Modeling: Perform vulnerability assessments, code reviews, and threat modeling for all new features and systems, focusing on the critical MES $\\rightarrow$ WMS $\\rightarrow$ OMS business process flow.\n\nCompliance Enforcement: Lead the implementation and auditing of security controls necessary for PCI-DSS compliance (for Payment module) and GDPR compliance (for user/tenant data handling).\n\nAccess Control & Authentication: Implement and manage secure API authentication methods, including OAuth 2.0 and SAML, utilizing Authentik/Ory Kratos and leveraging PostgreSQL's Row-Level Security (RLS) for tenant isolation.\n\nSecrets & Encryption: Manage secrets and key rotation using Vault, define and enforce encryption protocols for data both in transit and at rest, and manage certificates via Traefik.\n\nAbuse Prevention: Implement and monitor controls for API rate limiting, Web Application Firewall (WAF) rules, and traffic monitoring to prevent abuse and denial-of-service attacks.\n\nIncident Response: Develop and practice incident investigation and response protocols. Conduct security awareness training for development and operations teams.\n\nRequired Technologies & ToolsCandidates must possess hands-on security experience with our core stack and compliance tools:\n\nPlatform Security: Node.js/NestJS security best practices, Next.js/React security, PostgreSQL RLS.\n\nCompliance Focus: Experience with PCI-DSS and GDPR controls and auditing.\n\nAuthentication & Access: OAuth 2.0, SAML, JWT, Authentik/Ory Kratos.\n\nSecrets & Infrastructure: HashiCorp Vault, Docker, Terraform.\n\nMonitoring & Assessment: Tools for Static/Dynamic Application Security Testing (SAST/DAST).\n\nAI Agent SecurityYou will be responsible for securing the emerging AI ecosystem.\n\nAgent Trust Framework: Establish security boundaries for the AI agent interfaces, ensuring agents (built with LangChain/AutoGen) operate within strict permissions when accessing supply chain data (WMS, OMS).\n\nPrompt Injection Prevention: Implement validation and sanitization techniques to mitigate prompt injection and data exfiltration risks in user-facing LLM interactions.\n\nSuccess Metrics & Career PathPerformance will be measured by:\nSecurity Scorecard: Reduction in identified vulnerabilities from assessments and code reviews (SAST/DAST).\n\nCompliance Audits: Successful passing of regular PCI-DSS and GDPR audits.\n\nIncident Handling: Speed and effectiveness of security incident investigation and remediation.\n\nMentorship Structure: Reports to the Solution Architect or Head of Technology, working closely with the development and DevOps teams to embed security into the CI/CD pipeline.\nOriginally posted on Himalayas","description_format":"text","description_chars":3609,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce"],"lifecycle":[{"event":"open","at":"2026-10-25T14:28:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","velocity","win:early","comp:junior"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/metasys-security-engineer-internship","json_url":"https://alion.io/job/metasys-security-engineer-internship.json","meta":{"generated_at":"2026-10-26T07:25:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9888,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3856814},"rest":"https://alion.io/mcp/rest/get_company?id=3856814"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetasys-security-engineer-internship"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetasys-security-engineer-internship"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetasys-security-engineer-internship"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metasys-security-engineer-internship\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetasys-security-engineer-internship"}]}