Seeking a Summer 2027 internship Blue Team · AWS SAA ➔ Security Specialty

Mathieu Le Bourhis — Software & Cloud Security Engineer

Building software.
Hardening systems.
Blue Team defense.

Software engineer with 3+ years of production experience, focusing on defensive security (Blue Team) and cloud infrastructure. Target certification path: AWS SAA ➔ Security – Specialty. Looking for an on-site Summer 2027 internship in cloud security or software engineering as part of my engineering degree's international placement requirement.

Let's Talk View My Work
3+ years
Production experience
AWS SAA
Path ➔ Security Specialty
Blue Team
Defensive security
Mathieu Le Bourhis — Software Engineer
Based in France → Internship abroad, 2027
Experience

Production experience.

Full ownership of production applications and internal infrastructure as an apprentice software engineer since 2023.

ITSOLUTIONS
Software Developer (Apprenticeship)
September 2023 — Present · Work-study

As the sole developer in the company, I manage the entire lifecycle of our business applications — from initial requirements and architecture to development, deployment, server administration, and security.

  • Built a real-time mobile app and back-office ERP to manage driver missions in the field
  • Engineered a cost-effective SMS notification service with rate limiting and automated routing
  • Developed a secure B2B invoice portal with role-based access control and tenant data isolation
  • Deployed and maintained an on-premise Linux mail server (DNS, SPF/DKIM/DMARC, TLS encryption)
  • Manage continuous deployments, database migrations, security patches, and daily operations
  • Full autonomy across the technical stack: frontend, backend APIs, mobile, and Linux servers
Autonomy
End-to-end
Handling design, implementation, and deployment independently
Tech Scope
Full-stack & Infra
Mobile apps, REST APIs, databases, and Linux networking
In Production
Active daily
Critical business tools relied on daily by clients and staff
Academic Context
ISEN Ouest
Engineering school curriculum combined with high professional responsibility
Projects

Selected projects.

Production platforms, tools, and personal experiments.

Client production · B2B

Secure Invoice Retrieval Platform

Customer web portal allowing B2B clients to authenticate and securely download accounting documents.

Key challenge

Data isolation: ensuring strictly isolated tenant access with zero cross-customer leakage through granular role-based permissions.

Web App Authentication Access Control B2B Security
Infrastructure · Systems

On-Premise Mail Server

Self-hosted mail service deployed and configured on dedicated Linux infrastructure.

Key challenge

Reliable deliverability: configuring DNS records (SPF, DKIM, DMARC), TLS ciphers, and anti-spam heuristics to ensure legitimate traffic passes spam filters.

Linux DNS TLS/SSL
Public · Live

FixPDF

In-browser PDF editor designed to fix typos without altering original typography or page structure. 100% client-side with no account required.

Key challenge

Client-side text replacement: matching embedded font metrics and rendering seamlessly with PDF.js and pdf-lib directly in the browser.

Vanilla JS PDF.js pdf-lib Docker nginx
Live Demo
Confidential

Optimized SMS Gateway

Internal notification service engineered with message batching and rate limiting to control volume and telecom carrier costs.

API Design Cost Optimization Infrastructure
Confidential

Driver Mission Management

Cross-platform Flutter application connected to an ERP backend, facilitating live dispatching, validation, and delivery logging for drivers.

Flutter REST API ERP Integration
Public · Live

Flaguest

Real-time multiplayer geography quiz challenging players on flag recognition, powered by WebSockets.

Flutter WebSocket
Live Demo
Public · Live

Pepper Eating Contest

Event operations dashboard and live score display for a regional chili pepper eating tournament.

JavaScript HTML CSS
Live Demo
Skills & Stack

Technical focus.

Hands-on experience across application development, systems administration, and cloud security.

01
Full-Stack Development

Responsive web interfaces, robust backend REST APIs, and cross-platform mobile apps with clear architectures.

02
Systems & Infrastructure

Linux administration, Docker containerization, reverse proxies (Nginx), networking, and self-hosted services.

03
Cloud Security & Blue Team In progress

Defensive architecture, VPC design, IAM least-privilege policies, security groups, encryption, and hardening. Roadmap: AWS SAA ➔ Security – Specialty.

04
Testing & Reliability

Automated integration testing, deployment workflows, and proactive monitoring to maintain uptime and stability.

Technologies & Cloud Stack
AWS (EC2, S3, RDS, VPC, IAM) Linux Docker PostgreSQL Python TLS/SSL DNS (SPF/DKIM/DMARC) Git Node.js REST APIs Vue.js Flutter
About

From full-stack development to cloud security.

Combining three years of building production applications with a dedicated focus on cloud infrastructure.

I'm an engineering apprentice at ISEN Ouest (France). For over three years at ITSOLUTIONS, I have been building and maintaining production web and mobile software on my own. That daily responsibility gave me a pragmatic view of software engineering: how systems behave under real usage, where vulnerabilities actually creep in, and why operational security matters from the start.

Today, I am channeling this practical background into defensive security (Blue Team) and cloud infrastructure. Having built full-stack applications from database to UI makes it natural to understand attack surfaces, configure least-privilege IAM policies, and design defended architectures. Roadmap: AWS SAA ➔ Security – Specialty.

Looking for an on-site Summer 2027 internship abroad in cloud infrastructure, security, or full-stack software development to fulfill my engineering school's international placement requirement.

01
Security by design
Implementing least-privilege access, encryption, and network segmentation at the architectural level rather than as an afterthought.
02
Full-stack awareness
Understanding how code interacts with operating systems, databases, and network layers helps identify practical vulnerabilities.
03
Ownership & autonomy
Managing production systems solo means being directly accountable for uptime, clear documentation, and prompt problem resolution.
04
Continuous specialization
Deepening defensive cloud and Blue Team skills through practical labs and structured certifications: AWS SAA ➔ Security – Specialty.
Education

Academic & Certifications.

ISEN Ouest (Brest) — Engineering School

In progress

Software Engineering & Computer Science (CTI-accredited)

AWS Certified Solutions Architect – Associate (SAA)

In preparation

Cloud security path — Step 1: AWS architecture, high availability, VPC networking, and security best practices

AWS Certified Security – Specialty

Planned

Cloud security path — Step 2: advanced cloud defense, Blue Team practices, data protection, and incident response

BUT Informatique — Parcours Réalisation d'Applications

Completed

IUT of Lannion, University of Rennes • Ranked in Shanghai Ranking for Computer Science • Mention Assez Bien

Baccalauréat STI2D

Completed

Sciences and Technologies for Industry and Sustainable Development

Contact

Get in touch.

Whether you want to discuss cloud security, explore collaboration opportunities, or talk about an internship, feel free to reach out.

math.lb1902@gmail.com
Send an Email LinkedIn