Unpaid Internship, 8 Weeks: Security and Isolation QA, Dubai On-site

Internship overview

Location and attendance

• Fully on-site at Jumeirah Lakes Towers, Dubai.
• Hours are 10:00–16:00 Dubai time, Monday–Friday, with a 13:00–13:30 lunch/rest break; applicable holidays are observed.

Compensation and expenses

• The initial stage and internship are unpaid, with an AED 0 stipend.
• Participants cover routine commuting, meals, and accommodation; Elchai supplies approved training tools.
• Business expenses require written pre-approval.

Core testing work

• Test permitted and denied access across two synthetic customer branches.
• Test web and API permissions, resource-ID changes, and incorrect role or token use within approved lab scope.
• Check that important actions cannot proceed without approval specific to the action, branch, and version.
• Examine authorised search, report, export, download, notification, and log examples for unintended exposure.
• Record environment and version, source rule, expected and observed results, evidence, defects, and coverage gaps.
• Verify that audit records identify the correct branch, actor, and approval event in supplied scenarios.
• Turn suitable repeatable checks into small automated regression tests under mentor review.
• Draft internal isolation and approval test report sections, explain limitations, and prepare a usable handover.

Entry requirements

• Some practical exposure to web or API testing through coursework, labs, personal projects, or a junior role.
• Basic understanding of authentication, permissions, and roles.
• Clear English notes that distinguish expected behaviour, observations, and suspected causes.
• Careful evidence handling and willingness to correct errors, ask for approval, and escalate uncertainty.
• Acceptance of the unpaid on-site programme, approved attendance days and dates, and the JLT commute.
• Postman or Burp Suite familiarity is useful; approved tools can be learned during the internship.
• Basic Python or JavaScript helps with later automation; neither is stated as mandatory.

Additional scope and certificate