Security Engineer Intern

About AGMIO

AGMIO helps organizations put AI agents to work while keeping strict control over what those agents can do. The platform helps teams assess, secure, and govern AI agents across their lifecycle, from pre-deployment testing to monitoring actions in production. It brings together three components:

• ARGUS for red teaming and vulnerability assessment
• TRACE for runtime gateway policies and tracing
• AIM for identity and delegated access for humans and agents

Circuit breaker and kill switch controls let teams pause or stop agent workflows when behavior deviates. Teams also get clear visibility into assessment findings, policy decisions, and runtime activity. AGMIO offers authorized AI security assessments, guided pilots, and continuous assurance services.

The Internship

This is a 6-month, hands-on internship. You’ll work alongside our engineering and security teams to test, harden, and help build AGMIO’s AI agent governance platform. You’ll do real application and network security testing, contribute code to security tooling and platform features, and learn how security works for agentic AI systems. Interns who perform strongly will be considered for a full-time Security Engineer role at the end of the internship.

What You’ll Do

Application Security Testing

• Run SAST, DAST, and dependency (SCA) scans, then help triage and verify fixes.
• Test web apps and APIs against the OWASP Top 10 and OWASP API Security Top 10, including injection, broken access control, IDOR, SSRF, and authentication/session flaws.
• Support secure code reviews and threat modeling sessions.
• Help add security checks to CI/CD pipelines.

Network Security Testing

• Run network discovery and vulnerability scans on lab, cloud, and internal environments.
• Review firewall rules, security groups, exposed services, and TLS configurations.
• Check containers and cloud setups for common misconfigurations.

AI & Platform Security

• Help test AI agents for risks such as prompt injection, tool misuse, and excessive permissions using ARGUS.
• Build small scripts, tools, and dashboards that support assessment, policy enforcement, and runtime tracing.
• Write clear findings reports with severity ratings and remediation steps.

All security testing is done only on systems we own or are explicitly authorized in writing to test.

Requirements & Tech Stack

Required

• Solid understanding of web fundamentals: HTTP/S, cookies, sessions, REST APIs.
• Basic knowledge of the OWASP Top 10 and common web vulnerabilities.
• Networking basics: TCP/IP, DNS, ports, and firewalls.
• Programming or scripting ability in Python, JavaScript, or a similar language.
• Familiarity with Linux and Git.
• Curiosity, attention to detail, and clear written communication.

Nice to Have

• Hands-on use of Burp Suite, OWASP ZAP, Nmap, Nessus/OpenVAS, Semgrep, or Trivy.
• CTF participation, bug bounty reports, TryHackMe or HackTheBox progress, or a security blog or GitHub.
• Exposure to Docker, Kubernetes, or a cloud platform (AWS, Azure, or GCP).
• Some web development experience (React or a similar framework, plus back-end APIs).
• Interest in AI/LLM security.
• Certifications such as eJPT, CompTIA Security+, or CEH (not required).
• A degree in progress or completed in CS, IT, ECE, or a related field, or equivalent practical experience.

What You’ll Get

• ₹15,000 per month stipend for 6 months.
• Hands-on experience in AI security, application security, and network security.
• Direct mentorship from a founder with a background in government cybersecurity architecture and fintech security.
• Internship completion certificate and letter of recommendation, based on performance.
• Pre-placement opportunity: strong performers will be considered for a full-time Security Engineer role.

How to Apply

• Email your résumé to [email protected] with the subject line “Security Engineer Intern – [Your Name]”.
• Include any CTF profiles, GitHub repos, bug bounty write-ups, or lab work you’d like us to see.