Security Engineering Intern (May - Aug 2026)

About the bank

We are a growing regional digital bank group and are revolutionizing financial banking services across Southeast Asia. Our mission is to unlock big dreams and drive financial inclusion throughout the region. As a regional digital bank, we have the right foundation—data, technology, and trust—because we are Built With Heart. We believe that real impact starts with real people. If you're ready to Own The Mission and help us shape the future of Digital banking, we invite you to join us.

About the team

We are a security "builder" function that creates the automated tools and processes required to bring the bank’s security standards to life at production scale. Our mission is to ensure our engineering teams can innovate at high velocity by providing them with seamless, metrics-driven security controls.

What You’ll Do

• Collaborate with senior security engineers to build and maintain tools that identify and eradicate vulnerabilities across the entire software development lifecycle.

• Assist in automating security posture management across multiple domains, including Cloud (AWS/GCP), DevSecOps, and Kubernetes.

• Develop scripts and tools to enforce security policies and improve our automated response capabilities.

• Work with infrastructure-as-code (Terraform) to ensure security is baked into our systems from the ground up.

• Analyze security metrics to identify areas for improvement in our controls and contribute to a data-driven security culture.

• Manage tasks and project workflows within Jira, ensuring that every security improvement is measured and tracked.

What You’ll Need

• Currently pursuing a Bachelor’s or Master’s degree in Computer Science, Information Security, Software Engineering, or a related technical field.

• Basic to intermediate coding skills in languages such as Python, Go, or Java, with an interest in building internal security tooling and APIs.

• Familiarity with public cloud environments (AWS, Azure, or GCP) and an interest in learning Infrastructure-as-Code (Terraform) and container orchestration (Kubernetes/Docker).

• A foundational understanding of information security principles, including the OWASP Top 10, network security, and cryptography.

• A strong desire to "automate everything" and a preference for solving problems through code rather than manual processes.