Summer Intern 2027 - Product Security Engineering Intern

ID.me•Mountain View, CA

3d•Onsite

About The Position

ID.me is hiring a Product Security Engineering Intern for Summer 2027 to join its Product Security team, which helps secure the platform used for digital identity verification. This is a hands-on engineering internship: the intern will own a scoped project from start to finish, deliver improvements to how software is built and operated, and present the results to security and engineering leadership at the end of the summer. The capstone project will focus deeply on one or two areas selected with a mentor. The position is based in Mountain View, California. The intern will collaborate with engineering teams on security design, evaluate and help resolve security findings, improve security automation and developer workflows, assess cloud security, conduct focused reviews and testing, and produce documentation and guidance. The role offers mentorship and practical exposure to application security, cloud security, and DevSecOps on a high-scale identity platform operating under compliance requirements.

Requirements

Currently pursuing a Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field.
Working knowledge of common web application vulnerabilities, including injection, XSS, broken authentication, and access control flaws, and how to prevent them.
Familiarity with Git, the Linux command line, and basic networking concepts such as HTTP, TLS, and DNS.
Curiosity, a builder's mindset, and the ability to explain technical risk clearly to engineers who are not security specialists.
Must be authorized to work in the United States.
Must be able to pass a standard background check.

Nice To Haves

Experience with a major cloud provider, containers, or container orchestration.
Hands-on experience with application security testing and scanning tools.
CTF participation, bug bounty findings, involvement in a security club, open-source contributions, or a home lab to discuss.
Coursework or projects in applied cryptography, identity and access management, or authentication protocols such as OAuth 2.0, OpenID Connect, or SAML.
Interest in identity, fraud prevention, or privacy.

Responsibilities

Partner with engineering teams on threat models and security design reviews for new features and services.
Triage findings from static analysis (SAST), dependency scanning (SCA), secrets detection, and container scanning, and help engineers fix them.
Build or improve automation that brings security checks into CI/CD pipelines and developer workflows.
Help assess and improve the security posture of cloud environments, including cloud security posture management (CSPM) and container runtime tooling.
Perform focused code reviews and security testing against industry-standard and internal security frameworks and requirements.
Write clear documentation, secure coding guidance, and runbooks for engineers.
Deliver an intern capstone project and present it to the team at the end of the summer.

Benefits

Comprehensive medical, dental, and vision insurance.
Health savings account and flexible spending accounts, including medical, limited purpose, dependent care, and commuter benefit accounts.
Basic and voluntary life and AD&D insurance.
401(k) with company match.
Parental leave.
Unlimited paid time off subject to the terms and conditions of the PTO policy.
Eight company-wide holidays.
Short- and long-term disability insurance.
Accident and critical illness insurance.
Referral bonus policy.
Employee assistance program.
Pet insurance.
Travel assistant program.
Wellbeing and childcare discounts.
Benefit advocates.
Learning and development benefit.
Dedicated mentor on the Product Security team and regular 1:1s with security leadership.