QA Trainee, Security and Multi-Tenant Isolation - Internship

Location: On-site, Elchai Group Office, Dubai, UAE

Reporting to: Chief Technology Officer, with daily guidance from the Agent Workflow and Permissions Engineer and the Gateway Engineer.

The Mission

We are building a highly advanced, centralized AI Governance Orchestration platform. This role is the entry gate into our Security and Isolation QA track. You will be trained, tested, and evaluated on one mission: proving with repeatable, documented evidence that one client's data can never be accessed by another. Candidates who complete the program successfully progress toward owning the signed audit report that authorizes deployment to our first paying enterprise client.

The Program

Days 1 to 3, initial trial: orientation on our multi-tenant architecture, the two constitutional laws, customer isolation and human approval, and a first supervised isolation test exercise.

Weeks 1 to 8, school: structured training in web and API security testing, Postman and Burp Suite, RBAC and multi-tenant architecture, and test automation, while contributing to the real isolation test bench under senior review.

Gate review: progression to a paid trial and eventual onboarding depends on demonstrated ability, not time served, and is decided by the CTO based on documented evidence.

What You Will Practice

Building and maintaining a dual-client testing environment with segregated users, roles, and databases.

Attacking the boundaries between clients across every access point, not only the interface.

Testing for resource ID manipulation, cross-tenant token and ID injection, privilege escalation, cache and queue poisoning, and noisy-neighbor effects.

Hunting hidden leaks in reports, exports, search, downloads, notifications, logs, backups, and deletions.

Verifying per-client audit and observability, proving telemetry and human-approval events are attributable to a single client.

Turning every successful manual test into an automated test suite.

Drafting sections of the official Data Isolation Audit Report under review.

What We Require To Enter The Internhsip

Some hands-on exposure to web or API testing, even at a junior or learning level.

Willingness to learn Postman and Burp Suite intensively if not already proficient.

Basic understanding of authentication and authorization concepts.

Strong attention to detail and organized technical writing in English.

Full-time availability, on-site in Dubai.

Compensation and Conditions

The 3-day initial trial and the 8-week Internship period are unpaid training, in line with our standard internship pathway.

Progression to a paid trial, and eventually to the permanent role, is granted only after passing the gate review with a documented, working isolation test suite and a valid Version 1 Audit Report, reviewed and accepted by the CTO.

There is no guaranteed salary or fixed offer at the point of entry, since this is a training pathway, not a direct hire.