Application Security Intern

This is a fully remote position, open to applicants in Alaska, +7 more states.

📋 Description

• Design and refine AI-assisted security harnesses, focusing on prompt creation, tool integration, and validation of outputs.

• Create AI-powered workflows for generating security reports, documenting findings, and collecting evidence.

• Investigate and assess new AI models and frameworks applicable to application security processes.

• Assist in developing prototypes that incorporate LLM APIs into AppSec tools and testing workflows.

• Engage in evaluations of agentic pentesting tools, documenting results and aiding in harness improvements.

• Operate and set up SAST, DAST, SCA, IAST, and RASP tools under guidance.

• Triage and confirm findings from automated security tools, distinguishing genuine positives from false positives.

• Aid in the configuration, tuning, and integration of tools within CI/CD pipelines and SDLC processes.

• Assess and compare new AppSec tools, including agentic pentesting platforms.

• Take part in discussions regarding tools with clients and observe engagement sessions.

• Review application source code for vulnerabilities, such as injection flaws, authentication issues, and unsafe data management.

• Conduct manual code assessments across various programming languages, adhering to OWASP and secure coding best practices.

• Record findings with supporting evidence, risk context, and remediation recommendations.

• Align manual review outcomes with automated tool results.

• Observe client code-review sessions and assist in documenting findings.

⛳️ Requirements

• Currently enrolled or recently graduated with a degree in computer science, software engineering, or a related engineering discipline; substantial hands-on experience with various programming languages is essential.

• Familiarity with at least one programming language (such as Python, JavaScript, Java, or similar) and a willingness to read and analyze code.

• A clear interest in AI tools and their integration into security processes.

• Excellent written and verbal communication skills, capable of documenting findings and presenting results to technical audiences.

• Technical proficiency and a strong desire to learn through hands-on experience in a dynamic, practitioner-led environment.

• Preference for candidates in the Eastern or Central time zones.

• Must be physically located within the United States throughout the internship.

• Availability to work 25-29 hours per week, Monday to Friday, aligned with the Eastern Time Zone.

• Personal computing device and access to high-speed internet during working hours are required.

• Must not reside in Alaska, California, Hawaii, New Mexico, New York, Oregon, Washington, or Wyoming.

🏝️ Benefits

• Paid internship.

• Opportunity for full-time employment upon completion of the internship.

• Primarily remote work environment (U.S. based only).

• Group Medical Insurance options available for full-time employees.

• Group Dental Insurance for full-time employees.

• 12 corporate holidays and a Flexible Time Off (FTO) program for full-time staff.

• Generous mobile phone and home internet allowance for full-time employees.

• Eligibility for a retirement plan after 2 months during open enrollment for full-time employees.

• Pet Benefit Option for full-time employees.