Spring 2027 Security Engineer Intern

The Nuclear Company•Washington, DC

1d•Hybrid

About The Position

The Nuclear Company is an AI tech-enabled startup in the nuclear and energy space, using a fleet-scale, design-once, build-many approach to help deploy the next generation of nuclear reactors. Its Nuclear Operating System (NOS) supports regulatory, supply chain, cost, schedule, and field work behind reactor construction. The company expects employees to use AI, technology, and NOS to improve work and continually identify opportunities to automate workflows, enhance decisions, and improve processes. The Security Engineer Intern will join the Product Security team and help secure NOS and its supporting cloud systems. Working with security and software engineers, the intern will contribute to projects across application security, cloud security, and governance, risk, and compliance. Work may include assessing product features, strengthening cloud controls, improving detections, and documenting compliance evidence. The intern will have a mentor and may own a scoped project from design through delivery. This is a six-month Spring 2027 co-op based in Washington, DC, with on-site work three days per week. The role requires U.S. Person status (U.S. citizen or lawful permanent resident) because it involves access to information and technology subject to U.S. export controls, including DOE and NRC requirements. The company does not sponsor visas for this role.

Requirements

Currently enrolled in a BS program in Computer Science, Software Engineering, Computer Engineering, Cybersecurity, or a related technical field.
Available for the full co-op term and returning to school afterward.
Experience completing a working technical project through coursework, independent work, a student team, or a prior internship.
Ability to explain technical work clearly and learn from engineers in different disciplines.
U.S. Person status (U.S. citizen or lawful permanent resident) is required due to export-control requirements; visa sponsorship is not available.

Nice To Haves

A project involving application security, cloud security, security automation, detection engineering, or AI-enabled cyber defense.
Interest in AI-enabled software, energy, national security, industrial software, or regulated industries.
Programming fundamentals in at least one language such as Python, TypeScript, Java, or Go.
Nuclear engineering experience is not required.

Responsibilities

Build scripts, tools, and automation that help engineering teams develop secure software.
Help identify and address security risks in applications, APIs, AWS workloads, and development pipelines.
Participate in threat modeling, design and code reviews, and security testing with guidance from the team.
Help improve security visibility and detections for cloud workloads and the software the company operates.
Investigate findings from security tools, validate their impact, and work with engineers on practical fixes.
Document work so security improvements can be used and maintained across teams.