This internship offers hands-on experience supporting the development of secure engineering standards for software and production engineering teams.
You will help enhance existing guidance with specific implementation details and may support the development of custom libraries and resources.
Ideal candidates have programming experience in Python, Rust, C++, or Solidity and familiarity with Generative AI tooling.
Galaxy Digital Inc. is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. The company is headquartered in New York City with offices across North America, Europe, the Middle East, and Asia, and values a culture of high performance, transparent feedback, and mission-first approach.
Conduct threat modelling sessions using STRIDE with product and engineering teams, focusing on clinical safety, abuse, and business-logic threats.
Own and evolve the Secure by Design process, including self-evaluation screening, secure design review, and automated tooling against technical artefacts.
Perform automated application and API penetration testing against web, mobile backends, cloud-native services, and AI features, and lead third-party penetration engagements.
Numan is a digital health platform founded in 2018 that integrates diagnostics, medication, supplements, digital programmes, and doctor consultations to empower people to take control of their health. They are a 300+ person team distributed globally, guided by values of patient focus, learning, quality, collaboration, and care.
Provide consistent and qualified responses to tenders and assurance questionnaires from customers.
Produce and maintain security assurance documentation required for accreditation.
Schedule security testing, create remediation plans, and drive remediation of vulnerabilities.
NEC Software Solutions, part of global tech giant NEC Corporation, develops software that powers emergency services, public transport, healthcare, and government operations. With over 3,000 employees, we foster a collaborative culture focused on pushing boundaries and supporting public services.
Penetration test web applications, APIs, and mobile applications for clients across various industries.
Work with technical and non-technical stakeholders to identify vulnerabilities and recommend remediations.
Collaborate closely with developers and teams to strengthen application security and drive continuous improvement.
Cytix is a platform that threat models development tickets and creates security testing plans that include both manual and automated testing. They are a small team with big plans, recently securing Series A funding.
Lead the Security Posture Management team to secure GitLab's own software factory and drive comprehensive rollouts of security capabilities.
Serve as Customer Zero for GitLab security features, capturing adoption friction and feeding insights to Product and Engineering.
Establish proactive software supply chain security, including third-party governance, trusted dependency controls, and SBOM requirements.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and reduce security risk. With over 50 million registered users and more than 50% of the Fortune 100 trusting them, GitLab fosters a high-performance culture driven by values and continuous knowledge exchange.
Develop and maintain backend features for GitLab's vulnerability management workflows, primarily using Ruby on Rails.
Collaborate with frontend engineers and contribute across the stack when needed, focusing on performance and reliability.
Participate in on-call rotations to assist with troubleshooting product operations and security issues.
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and reduce security risk. With over 50 million registered users and more than 50% of the Fortune 100 as customers, GitLab fosters a high-performance culture driven by values and continuous knowledge exchange.
Lead delivery of Microsoft security engagements focusing on Purview, data security, data governance, and AI.
Facilitate customer workshops, discovery sessions, and technical design discussions.
Assess client environments, conduct security reviews, and provide actionable recommendations.
Threatscape is a cybersecurity consultancy that specializes in Microsoft security solutions, helping organizations strengthen their security posture through expert guidance and implementation. Their growing Microsoft Security Practice includes industry-leading experts, including five Microsoft MVPs, fostering a collaborative culture of high agency, enthusiasm, and continuous learning.
Lead product security delivery across the FSS Programme, embedding secure-by-design in ship and IT/OT architecture.
Act as the focal point for product security with customers, stakeholders, and suppliers.
Oversee risk management, TEMPEST, security testing, and cross-domain security for a UK maritime defence programme.
Navantia UK is a UK subsidiary of Spanish Navantia, focused on shipbuilding, defence, and offshore wind energy. With over 300 years of heritage, they are a world leader in war ship design and lifecycle support, and they foster an inclusive culture grounded in values of service, trust, excellence, agility, dedication, and you.