QA Intern, Security and Multi-Tenant Isolation - Elchai Group

QA Intern, Security and Multi-Tenant Isolation - Intern - Elchai Group Location: On-site, Elchai Group Office, Unit 2008, 20th Floor, Dubai, UAE.Collaboration: Agent Workflow and Permissions Engineer, Gateway Engineer, and the Security and Isolation QA Engineer.The MissionWe are building a highly advanced, centralized AI Governance Orchestration platform. As a Security and Isolation QA Intern, you will help prove with repeatable, documented evidence that one client's data can never be accessed by another. You will work alongside our senior QA Engineer on the testing that leads to a signed data isolation audit report before deployment to a paying enterprise client. This is a hands-on role for someone who already understands the fundamentals and wants to sharpen them on a real multi-tenant system.What You Will DoWork the Bench: help build and maintain a dual-client testing environment with segregated users, roles, and databases.Attack the Boundaries: test the boundaries between clients across all access points, not just the graphical interface.Vulnerability Hunting: test for resource ID manipulation, cross-tenant token and ID injection, privilege escalation, cache and queue poisoning, and noisy-neighbor resource effects.Expose Hidden Leaks: verify data isolation where it silently breaks, such as background reports, data exports, search functions, file downloads, notifications, system logs, and backups.Support Audit and Observability Checks: confirm that logs and human-approval events are separated and attributable to a single client, in line with our governance rules.Support Automation: turn manual checks into automated tests that run on each code release.Document Clearly: write clear, reproducible bug reports and support the senior QA Engineer in maintaining the Data Isolation Audit Report.What We RequireA working understanding of web and API security testing, not just theory.Ability to read, intercept, and modify network requests and payloads, for example with Postman or Burp Suite.A solid grasp of Role-Based Access Control and the basics of how multi-tenant systems keep data separate.Some hands-on exposure to a test automation framework.Clear, organized technical writing in English.A careful, detail-oriented mindset. You do not assume a system works, you check it.The First 8 WeeksGet up to speed on the dual-client test bench and how it is configured.Help map out a list of attack vectors and edge cases.Support a full run of the security test suite end to end.Contribute to the audit notes, flagging weak points you find and their severity.Compensation and ConditionsThis is an unpaid internship, 8 weeks, on-site, Monday to Friday. (10 AM - 4 PM)A completion certificate is provided, subject to satisfactory performance.High-performing interns may be considered for a full-time role based on performance and company needs. The candidate who will succeed in this position will be able to create all the testing and automation frameworks as required for their projects. Thus, the candidate may have to work on multiple projects at once, also working to improve the company's best practices from a testing standpoint.  ResponsibilitiesDesign, implement, and execute test casesEvaluate testing process, make recommendations as necessaryTimely execution of test casesIdentify, and record bugsQualificationsBachelor's degree or equivalent experience in Computer Science1+ years relevant testing experienceTechnical skills in OOPTeam player