The website and the team’s tools
Digital team
A volunteer role in the Digital team: you report to the Head of Digital and Team Tools. A confidentiality commitment, signed when you join, governs your access to personal data.
Assignments
- Define the test strategy for the site, the Worker and the Google tools, and track its coverage
- Set up continuous integration with GitHub Actions: tests and checks on every proposed change
- Review code with a security eye and carry out a review before each deployment
- Maintain the content security policy of the site and the online spaces
- Keep secrets in a vault, organise their rotation and audit dependencies
- Set access and rate limits for the online spaces, and apply data minimisation with the Data Protection Coordinator
- Write and test the incident response plan: who to alert, what to switch off, how to restore service and report
- Follow up the association’s email authentication (DMARC) with the Google Workspace Administrator
Tools to master
- GitHub Actions: continuous integration
- Node.js test runner and Puppeteer: automated tests
- Cloudflare: security rules, rate limits, logs
- Dependency auditing and code analysis tools: continuous review
What you will deliver
- A test strategy and continuous integration in service
- A tested incident response plan
- A security review for each deployment and a monthly update for the Head of Digital and Team Tools
Profile we are looking for
- A solid grounding in application security: the main families of web vulnerabilities, authentication, secrets management
- Experience with automated testing
- Rigour, discretion and a gift for explaining things to developers
A volunteer role, open to young people
Every role we offer is fully voluntary. The experience we ask for can come from a course, a student project, an internship, volunteering or a personal project: every skill counts, wherever you gained it. Our roles are designed first and foremost for young people, and we weigh your motivation and potential as carefully as your track record. Want to be part of something big? Apply.
Nice to have
- Training in cybersecurity or experience of capture-the-flag competitions
- Experience with Cloudflare or GitHub Actions
- Good English and French
What this role gives you
- End-to-end security of a set of services in production
- Experience of continuous integration and incident response, sought after across the tech sector
- Working with every YouthShare developer and administrator
Applications open until ; a new cycle follows
Applications open in forty-five-day cycles, each followed by the next. YouthShare reserves the right to close this listing as soon as the right person is found. We therefore encourage you to apply now.
The one-year commitment
A non-profit project is built over time. Every volunteer therefore commits for at least one year: time to settle in, carry the assignment through and pass on what they have learned. The weekly time depends on the role and is given in each role description.
How selection works
Online application
You choose a role, present your background and attach your CV. A confirmation email gives you your reference.
Profile review
The Talent team reads every application, matches it with the needs of the role and sends you a first reply by email within three days on average.
Video interview
A conversation to get to know each other and shape the assignment together.
Decision and arrival
You receive our answer by email, followed by a welcome to the team and access to its tools.
Know the right person?
Recommend this role to them: they receive an email from YouthShare that presents it, with your name and the link to apply. You can also share the listing on your networks.