OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world's critical infrastructure and securing our way of life.
The Position
OPSWAT is now searching for a Software Engineering Intern to join our MDCloud product. MDCloud is a real-time malware scanning platform handling 30M+ requests/day, built on a [protected info] microservices architecture with event streaming (Kafka, RabbitMQ) and React frontend.
As an Intern, you'll work directly with senior engineers shipping real features, fixing real bugs, and learning how a production-grade cybersecurity platform is built and operated.
What You Will Be Doing
Implement small features and bug fixes across backend services ([protected info]) under guidance from senior engineers
Write unit and integration tests to improve coverage on existing modules
Participate in code reviews: receiving feedback and reviewing peers
Debug issues in local and staging environments using logs and tracing tools
Read and understand event-driven flows (Kafka consumers, RabbitMQ handlers) to contribute to ingestion and processing pipelines
Update and maintain internal documentation, API specs, and runbooks
Join sprint planning, daily standups, and retrospectives as an active team member
Experiment with frontend components in the internal tooling dashboard (React + TypeScript)
What You'll Learn
By the end of your time on MDCloud, you'll have hands-on exposure to:
Production TypeScript microservices: structure, patterns, and testing
Event-driven architecture with Kafka and RabbitMQ
Docker and basic Kubernetes concepts (deployment, logs, exec)
Code review culture and engineering standards in a global product company
How a cybersecurity SaaS platform processes millions of file scan requests
What We Need From You
Education & Background
Pursuing or completed a degree in Computer Science, Software Engineering, or equivalent
Able to commit at least 4 months (internship) or full-time (associate)
Soft Skills
Curious and proactive
Communicates clearly in English (written); able to describe problems and solutions concisely
Receptive to feedback and willing to iterate quickly
Comfortable working in a team across different timezones
Technical Fundamentals
Solid understanding of programming fundamentals: data structures, algorithms, OOP
Hands-on experience with JavaScript or TypeScript coursework or personal projects count
Familiar with Git: branching, pull requests, resolving conflicts
Basic understanding of REST APIs: HTTP methods, status codes, request/response structure
Able to read and understand existing code in an unfamiliar codebase
Actively uses AI coding tools (GitHub Copilot, Cursor, Claude, ChatGPT) as part of daily workflow, knows how to prompt effectively, verify output, and not blindly trust generated code
Dev Environment
Comfortable working in a Linux/macOS terminal
Knows how to run a project locally with Docker Compose
Can use a debugger or structured logging to trace a bug
If Would Be Nice If You Had
Prior internship or project experience with a [protected info] or TypeScript backend
Familiar with any testing framework (Jest, Vitest, Mocha)
Basic React knowledge: able to build or modify a UI component
Exposure to message queues (Kafka, RabbitMQ, Redis)
Knows what a microservice is and why services communicate over events
Experience with any cloud provider (AWS, GCP, Azure)
Interest in cybersecurity: malware analysis, threat intelligence, or security tooling
Has read about or experimented with CI/CD pipelines
Experience building features or scripts with AI assistance end-to-end from prompt design to testing the result
Understands limitations of LLM-generated code: hallucinations, outdated APIs, security blind spots
Has experimented with AI APIs (OpenAI, Anthropic, Gemini) in side projects
Familiar with concepts like RAG, embeddings, or function calling even at a basic level
Thông tin chung