Internship security in software development
At Trifork Amsterdam, we're working on custom enterprise applications for various clients. Some have their own requirements for secure development, and others rely on Trifork to guide them.
To make sure all teams and projects are using a common base standard, and have the knowledge and means to improve their software development lifecycle when it comes to security, we are looking for an intern to assist in improving the current way of working.
You will work together with one or some of the teams to determine the aspects of the software development lifecycle where we can influence and improve the way we build software for the customer.
Some of the topics on the table include:
dependency checking (containers, libraries)
e.g. OWASP, Snyk, SBOM
code analysis (static & dynamic)
SonarQube, fuzzing, ...
available tooling (OSS, commercial)
pipeline integration
Gitlab, Github, maven, Gradle, ...
reporting & alerting
The outcome would ideally be a set of recommendations to improve the base level of security in our diverse development lifecycles and directions on how to maintain and improve on that.
This could include a comparison of the current market we're working on and the adoption of tools and techniques by organisations in the market.
studying at a Dutch university or university of applied sciences and looking for a graduation project (bachelor or master level)
an institute in the Amsterdam area is preferred
studying or specialising in software security
having some experience with the Java platform is strongly recommended
Fluent in English is a must, and Dutch is a plus
Do you want to accept the challenge and join us as our new intern on security in software development? Then we'd love to hear about you!