Cyber & AI Security · Internship Role

CLOUD SECURITY

Review cloud setups and access controls to find public buckets, over-powered accounts and missing logs before attackers do.

SKILLS YOU'LL WALK AWAY WITH

IAM & least privilegeCloud misconfigurationsCIS BenchmarksLogging & monitoringAWS / Azure / GCP basics

PROOF-OF-WORK TASKS

8 TASKS

Start at Beginner and work up. Every task produces something real you can show: a report, a tool, a guide or a demo. Publish it on LinkedIn or GitHub as your proof of work.

Beginner

LEVEL 01

01Create a free-tier cloud account, enable MFA on the root account, and create a least-privilege user. Document it as 'The First 30 Minutes of a Secure Cloud Account'.
02Explain the shared responsibility model with a visual for one cloud provider, and map 5 real breach examples to who was responsible.
03Complete flAWS levels 1–3 and explain each misconfiguration in plain language.

Intermediate

LEVEL 02

01Run Prowler (or ScoutSuite) on your own test account, fix the top 10 findings, and show the before/after results.
02Write an IAM review checklist for startups (unused users, admin rights, access key age, MFA, roles) and apply it to your lab account.
03Deploy CloudGoat in your own account, complete 2 scenarios, document the attack path and the fix, then tear everything down.

Advanced

LEVEL 03

01Write a cloud security review report for a mock startup architecture (web app, database, storage, CI/CD): findings, risk ratings, and a prioritised fix plan.
02Build an automated guardrail, a script or policy that detects public storage buckets or overly permissive security groups and alerts you.

HAND-PICKED FREE RESOURCES

6 RESOURCES

FREE COURSE