Summer Intern 2027 - Product Security Engineering Intern

ID.me University Recruiting•Mountain View, CA

5d•Onsite

About The Position

ID.me is hiring a Product Security Engineering Intern for Summer 2027 to join its Product Security team, which secures the company’s digital identity platform. This is a hands-on engineering internship in which the intern will own a scoped project from start to finish, deliver improvements to software development and operations, and present the results to security and engineering leadership at the end of the summer. The internship is based in Mountain View, California. The intern will work with engineering teams on threat modeling and security design reviews, triage and help remediate security tool findings, build security automation for CI/CD pipelines and developer workflows, assess cloud security, conduct focused code reviews and security testing, and write practical security documentation. The capstone project will focus deeply on one or two areas, with a mentor helping select a clearly scoped project tied to a shipped improvement. The intern will receive a dedicated Product Security team mentor and regular one-on-ones with security leadership, and gain experience in application security, cloud security, and DevSecOps on a high-scale identity platform subject to compliance requirements.

Requirements

Currently pursuing a Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field.
Working knowledge of common web application vulnerabilities, including injection, XSS, broken authentication, and access control flaws, and how to prevent them.
Familiarity with Git, the Linux command line, and basic networking concepts such as HTTP, TLS, and DNS.
Curiosity, a builder's mindset, and the ability to explain technical risk clearly to engineers who are not security specialists.
Must be authorized to work in the United States.
Must be able to pass a standard background check.

Nice To Haves

Experience with a major cloud provider, containers, or container orchestration.
Hands-on experience with application security testing and scanning tools.
CTF participation, bug bounty findings, security club involvement, open-source contributions, or a home lab to discuss.
Coursework or projects in applied cryptography, identity and access management, or authentication protocols such as OAuth 2.0, OpenID Connect, or SAML.
Interest in identity, fraud prevention, or privacy.

Responsibilities

Partner with engineering teams on threat models and security design reviews for new features and services.
Triage findings from static analysis (SAST), dependency scanning (SCA), secrets detection, and container scanning, and help engineers fix them.
Build or improve automation that brings security checks into CI/CD pipelines and developer workflows.
Help assess and improve the security posture of cloud environments, including cloud security posture management (CSPM) and container runtime tooling.
Perform focused code reviews and security testing against industry-standard and internal security frameworks and requirements.
Write clear documentation, secure coding guidance, and runbooks for engineers.
Deliver an intern capstone project and present it to the team at the end of the summer.

Benefits

Comprehensive medical insurance
Dental insurance
Vision insurance
Health savings account
Flexible spending accounts, including medical, limited purpose, dependent care, and commuter benefit accounts
Basic and voluntary life and AD&D insurance
401(k) with company match
Parental leave
Unlimited paid time off subject to the PTO policy
Eight company-wide holidays
Short- and long-term disability insurance
Accident and critical illness insurance
Referral bonus policy
Employee assistance program
Pet insurance
Travel assistant program
Wellbeing and childcare discounts
Benefit advocates
Learning and development benefit