AI Security Engineer Co-Op Intern, Winter 2027

Brain Co.•San Francisco, CA

31d•Onsite

About The Position

As a Platform Security Engineer Co-Op Intern, you’ll work alongside experienced security, platform, and infrastructure engineers to help build security directly into how Brain Co. develops and ships software. This co-op is designed for current undergraduate students, specifically juniors or seniors, who want hands-on experience securing real production systems. You’ll contribute to projects across CI/CD, cloud infrastructure, Kubernetes, containers, and Infrastructure-as-Code while receiving mentorship through code reviews, design discussions, and hands-on collaboration with the team. This is a builder-focused security role. You’ll learn how security tooling and automated guardrails can make the secure path the easy path for engineers.

Requirements

Are a current undergraduate student, specifically a junior or senior, pursuing a degree in Computer Science, Engineering, Cybersecurity, or a related technical field.
Have strong software engineering fundamentals through coursework, internships, research, or personal projects.
Have experience programming in Python, Go, Java, C++, Bash, or a similar language.
Have exposure to or a strong interest in application security, platform security, cloud security, or infrastructure security.
Are familiar with or excited to learn technologies such as Kubernetes, Docker, Terraform, GitHub Actions, and AWS/GCP/Azure.
Have an interest in how software moves from code to production, including CI/CD, containers, cloud infrastructure, and deployment workflows.
Enjoy thinking about how systems can fail, where trust boundaries exist, and how security controls can prevent problems without slowing engineers down.
Are curious, proactive, and excited to learn quickly in a fast-paced engineering environment.
Enjoy taking ownership of technical problems while learning from experienced engineers.

Nice To Haves

Coursework, projects, or internship experience involving cloud security, Kubernetes, or Infrastructure-as-Code.
Familiarity with security tooling such as OPA, Conftest, Kyverno, Trivy, Semgrep, or similar tools.
Experience with secrets management, IAM, or authentication and authorization systems.
Interest in software supply chain security, including dependency security, image signing, SBOMs, or secure build pipelines.
Experience building developer tools or automation.

Responsibilities

Help build and improve security controls in CI/CD pipelines, including static analysis, secrets scanning, dependency checks, and automated policy enforcement.
Contribute to developer-facing security tooling, such as linting rules, reusable workflows, automation, and guardrails.
Help secure Kubernetes and containerized workloads, including access controls, image security, workload configuration, and deployment policies.
Contribute to security baselines in Terraform and Infrastructure-as-Code, including IAM, networking, encryption, and secure defaults.
Work with cloud infrastructure across AWS, GCP, or Azure to identify misconfigurations and improve security visibility.
Help automate the detection and remediation of common security issues.
Participate in threat modeling, code reviews, and architecture discussions alongside experienced security and platform engineers.
Work with engineers to understand security findings and turn them into practical, actionable fixes.
Help improve documentation and tooling so security controls are easy for developers to understand and adopt.