Virtuozzo offers an exciting internship opportunity in Security for Alumni of Constructor University Bremen. During this internship, you, together with the other interns, will work on a security hardening project under the mentorship of experienced engineers. You will gain hands-on experience developing tools to detect misconfiguration issues, apply recommended fixes, and generate clear security reports, contributing to improving the overall OS-level security of cluster nodes.

About the Project

There is a comprehensive Security Hardening Guide for a private-cloud cluster that details recommended configurations and monitoring practices to protect each node and the cluster as a whole, and to identify potential security flaws.

The goal of this project is to research how to fully automate the guide’s recommendations by developing a single command-line utility that detects violations of the guide’s recommendations and reports findings in both human-readable and machine-readable formats (e.g., JSON/YAML). Each detection check in the utility should correspond to its own idempotent script to apply the corresponding hardening recommendation to the OS or service on a node. This utility must integrate into our existing node-management agent so that scans and remediations can be triggered automatically or on demand.

The final result should include an implemented threat-detection utility alongside a suite of OS-state modification scripts for each recommendation, all callable by the node agent. A dedicated REST API endpoint on the cluster backend will trigger security scans and aggregate reports from every node, and the cloud CLI client will gain commands to manage and invoke this hardening feature. Additionally, end-to-end and upgrade testing scenarios will validate functionality on both new deployments and upgraded clusters.

Student Requirements:

1. Senior-level Computer Science undergraduate or graduate student.
2. Strong foundation in operating systems and security principles.
3. Proficiency in Python and Linux shell scripting.
4. Experience with cloud and Linux technologies (e.g., POSIX, iptables, systemd, SELinux).
5. Research-oriented mindset: read academic papers, design experiments, work independently.

Compensation: 1,000 EUR/month (full-time).

Duration: 2 months full-time during the summer, with the possibility of extension

on a part-time basis.

Location: Fully remote.

Start Date: July 1s

If you need more information, contact us at internships@virtuozzo.com