Project overview:

• Goal: Develop and implement an automated notification system for the Dark Web Monitoring service by connecting the threat intelligence provider's API with our customer portal platform's secure API using Python. The system will monitor compromised accounts (ULP or URL:Login:Password combinations) from dark web sources and promptly notify customers.
• Location: Amsterdam
• Timeframe: TBD
• Starting: TBA
• Complexity: Medium-high
• Team: Product Development
• Category: DevSecOps
• Supervisor: TBD

As a student, you have:

Education:

• Currently pursuing a degree in Cybersecurity, Computer Science, Software Engineering, or a related field.

Soft skills:

• Excellent communication, self-organization, and documentation writing skills.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.

Technical skills:

• Proficiency with programming/scripting languages (particularly Python).
• Experience with API integration and RESTful services.
• Familiarity with cybersecurity concepts, particularly related to threat intelligence and compromised credentials.
• Understanding of notification systems.

The project you will be working on:

As an intern, you will design and implement an automated notification system that bridges the threat intelligence provider's API and our customer portal platform's secure API. Your responsibilities will include:

1. Research and Requirement Gathering:
   
   -Research existing notification systems and identify best practices for promptly notifying customers.
   - Work with the threat intelligence provider to understand their API capabilities.
   - Collaborate with the internal team to gather requirements and define the scope of the automated notification system.
   
   
2. API Integration and Data Processing:
   
   - Integrate the threat intelligence provider's API to access compromised account data (ULP or URL:Login:Password combinations).
   - Develop a data processing system to filter, normalize, and categorize incoming data.
   - Design and implement an API endpoint in the customer portal platform for secure communication with clients.
   
   
3. Notification System Design and Development:
   
   - Design the architecture of the notification system to ensure scalability and reliability.
   - Implement automation scripts to periodically query the threat intelligence provider's API for new compromised accounts.
   - Develop a customer mapping mechanism to match compromised accounts with relevant customers.
   - Connect the threat intelligence provider's API with the customer portal platform's secure API.
   
   
4. Automated Notification Implementation:
   
   - Build an automated notification system that can send alerts via the customer portal platform API or other secure communication channels.
   - Ensure the notification system is configurable to meet varying customer preferences and compliance requirements.
   - Develop templates for notification messages to ensure clarity and consistency.
   
   
5. Compliance & Quality Assurance:
   
   - Implement measures to protect customer data throughout the notification process.
   - Create test cases to validate the accuracy and efficiency of the notification system.
   - Conduct thorough testing to identify and fix bugs, ensuring smooth and reliable operation.
   - Simulate compromised account scenarios to verify the effectiveness of the notification system.
   
   
6. Documentation and Recommendations:
   
   - Document the architecture, setup, and usage of the notification system.
   - Write comprehensive user and developer documentation.
   - Provide recommendations for future improvements, scalability, and integration with additional communication channels.
   
   
7. Knowledge Sharing and Collaboration:
   
   - Collaborate with the internal team to gather feedback and refine the system.
   - Share knowledge with colleagues to ensure smooth adoption of the automated notification system.