DevSecOps - Internship

🧰 Who We Are

🚀 About the Team

• Embedding security by design into our development and delivery practices.
• Implementing security automation in CI/CD pipelines.
• Providing visibility, metrics and tooling so that developers can build and operate secure applications efficiently.

🎯 Your Mission

Security Pipeline Development

• Designing and implementing security features in CI/CD pipelines to enable early security testing and feedback.
• Integrating automated security scanning tools (SAST, DAST, SCA, etc.) into development workflows.
• Building automated security gates and quality checks to prevent vulnerabilities from reaching production environments.

Shift-Left Security Implementation

• Help introduce and promote security practices early in the development process.
• Contribute to developer-friendly security tooling and documentation to support secure coding practices.
• Participate in the creation of dashboards and reports for security metrics and application scores, enabling teams to monitor and improve their security posture.

Security Visibility & Monitoring

• Implementation of security monitoring and alerting solutions for Wakam’s digital applications.
• Development of visibility tools for tracking security breaches, vulnerabilities, and remediation progress.
• Creation of global dashboards for assessing and comparing security posture across applications.

Collaboration

• Collaborate with development, operations, security and platform teams to understand their needs, constraints and pain points.
• Contribute to continuous improvement initiatives around developer experience and application security.

🧠 What You Bring

• You are currently pursuing a degree in Computer Science, Cybersecurity, Engineering, or a related field.
• You have basic knowledge of security concepts, such as:
  • OWASP Top 10
  • Vulnerability management
  • Secure coding principles
• You are familiar with at least one programming or scripting language (e.g. Python, Bash, Go, or similar).
• You demonstrate strong problem-solving skills and can learn new technologies quickly.
• You have good communication skills and a collaborative, team-oriented mindset.

Nice to Have

• Understanding of CI/CD concepts and tools (GitLab CI, GitHub Actions, Azure DevOps, etc.).
• Hands-on exposure to security scanning tools (SonarQube, Trivy, Snyk, OWASP ZAP, etc.).
• Experience with Git-based workflows and collaborative development (pull/merge requests, code review).
• Knowledge of containerization and orchestration (Docker, Kubernetes).
• Familiarity with Infrastructure as Code (Terraform, Ansible).
• Understanding of cloud platforms (AWS, Azure, GCP) and their security services.
• Exposure to monitoring and observability tools (Prometheus, Grafana).
• Knowledge of secure coding practices and application security testing.
• Previous DevOps, security or automation project experience (personal, academic, or professional).

✨ Who You Are

• Are curious and passionate about the intersection of development, security and operations.
• Enjoy automating things and improving how teams work, rather than doing repetitive manual tasks.
• Are rigorous and detail-oriented, especially when dealing with security-related topics.
• Feel comfortable working in an international, fast-paced environment, where priorities can evolve.
• Are proactive and resourceful, able to search for solutions, experiment, and share your learnings.
• Enjoy collaboration and knowledge-sharing, and can explain technical topics in a clear, structured way.

✨ 🤖 AI & Digital Mindset

• Work daily with modern tooling (CI/CD platforms, Git, containers, cloud services, monitoring and security tools).
• Be encouraged to automate manual tasks in pipelines, security checks, and reporting.
• Explore how AI and smart automation can support:
  • Vulnerability triage and prioritisation
  • Pattern detection in logs and alerts
  • Assistance for secure coding (with appropriate human oversight)
• Contribute to a developer-centric approach, where security is integrated in a way that enhances, not slows down, the developer experience.

🌟 Why Join Wakam?

• Have a real impact: your work will directly improve security across all Wakam digital applications and help shape our security product vision in 2026, when security will be a major strategic focus.
• Contribute to innovation, working on new foundational features for application security and developer experience.
• Help strengthen Wakam’s security posture, participating in attack prevention and attack surface reduction initiatives.
• Gain hands-on experience with modern DevSecOps tools and practices, in real CI/CD pipelines at scale.
• Work with cross-functional teams (developers, DevOps/SRE, security, product) in a collaborative and supportive environment.
• Benefit from mentorship by experienced DevOps and Security professionals, with structured learning opportunities.
• Be part of Wakam’s talent pipeline, with a potential future apprenticeship path, which strongly increases your long-term opportunities within the company.

🏆 Hiring Process

1. Initial interview with our Talent Acquisition Partner
   To understand your background, motivations, and interest in DevSecOps and security, and to give you a first overview of Wakam and the Digital Office team.
2. Interview with our Head Of Information Security
   To dive deeper into your technical skills, problem-solving approach, and mindset, and to present the missions and expected outcomes of the internship.
3. Optional follow-up discussion
   A short additional conversation with a team member or a senior stakeholder may be organised to confirm the mutual fit and answer your remaining questions before final decision.