Condividi questa offerta

Internship - IT Cyber Security

Data: 19-set-2021

Luogo: Milano, IT

Società: Vodafone

Vodafone Internship Program is a development path dedicated to both Bachelor and Master’s students/graduated, which allows you to spend 6 months of as an active member in one of our teams.
After this experience, you will be able to relay complex information in a simple, clear and concise way to senior management. You will gain independence in performing the tasks assigned, setting priorities and achieving your goals. It includes also the opportunity to work on a project that could be the topic of your final dissertation.
The Internship Program may be just the first step of you career in Vodafone. In fact, it will allow you to be part of the selection process for our Discover Program.


Role Purpose:


The candidate will work closely with Vodafone delivery squad teams to embed security into DevOps processes through static and dynamic code analysis.

- Embed security into DevOps processes through static and dynamic code analysis.
- Support the setup of Source Code Analysis tools to identify security vulnerabilities and assist development teams vulnerability fixing.
- Fine-tune the rules on the Source Code Analysis tools to avoid false-positive.
- Define and formalize criteria to authorize code commitment.
- Define metrics to measure how many issues are being detected and fixed prior to committing code.
- Develop executive-level report to keep track of devsecops process maturity.

Key accountabilities and decision ownership:


- Enforcement of DevSecOps process: ensure that source code is continuously tested to avoid security weaknesses, bugs and violations of programming conventions before committing code
- Support DevSecOps tooling fine-tuning

Core competencies, knowledge and experience:


- Software and web application development practices.
- CERT/CC, MITRE, Sun and NIST secure coding guidelines and standards.
- Knowledge with scripting languages, specifically shell, ansible, powershell.
- Understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery.
- Familiar with build/deployment tools and related environmental artifacts (such as Salt, Chef, Jenkins, Jira, Subversion and Git).
- Knowledge with Source Code Analysis tools (SAST/DAST/IAST/RASP).

Must have technical / professional qualifications


- Bachelor and Master’s studies in Cyber Security, Engineering, Computer Science, Software Engineering
- Real-life programming experience.
- Must have fluency in Italian and English

What are you waiting for? Let's Apply!