Summer Associate Internship (Penetration Testing)

Navy Federal Credit Union•Pensacola, FL

2h•$26 - $47•Hybrid

About The Position

Summer Associates within the Adversarial Security Practice (ASP) may work on a variety of projects that strengthen Navy Federal’s offensive security, detection, and resilience capabilities. Potential projects include researching and developing new penetration testing methodologies, evaluating AI-powered security testing and attack simulation tools, creating threat-informed purple team, red team, or adversary emulation frameworks, developing security testing automation and reporting solutions, enhancing governance, procedures, and playbooks for penetration testing and remediation validation, performing research on emerging threats, vulnerabilities, and attack techniques, supporting documentation and process improvements across the Secure Innovation & Resiliency (SIR) organization, and designing strategic cybersecurity capabilities that improve collaboration between offensive and defensive security teams. The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.

Requirements

Must be pursuing a Bachelor's or Master's degree from an accredited college or university in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related field.
Demonstrated interest in cybersecurity, ethical hacking, penetration testing, security engineering, or information assurance, such as participation in Capture the Flag (CTF) events, Hack The Box, VulnHub, collegiate cyber defense or CTF teams, security clubs, local cybersecurity meetups, security conferences, personal lab environments, vulnerability research, or similar hands-on learning activities.
Basic understanding of networking concepts, operating systems, web applications, and common security principles.
Familiarity with common cybersecurity threats, vulnerabilities, attack techniques, and defensive controls.

Nice To Haves

Strong analytical and problem-solving skills with the ability to research complex topics and develop practical recommendations.
Effective verbal and written communication skills, including the ability to clearly present technical concepts to diverse audiences.
Ability to work independently while collaborating effectively within a team environment.
Demonstrated curiosity, initiative, and a willingness to learn new technologies and cybersecurity concepts.

Responsibilities

Support application, infrastructure, cloud, wireless, and API penetration testing activities, including information gathering, security testing, vulnerability analysis, and documentation.
Assist with researching emerging cyber threats, attack techniques, vulnerabilities, and industry security trends to enhance the organization's security testing capabilities.
Participate in remediation validation efforts to verify that identified security findings have been effectively addressed.
Support the development and maintenance of penetration testing procedures, playbooks, governance documentation, and operational processes.
Assist with the creation of reports, presentations, and other deliverables that communicate security findings, recommendations, and program objectives to technical and business audiences.
Collaborate with cybersecurity, technology, and business teams to understand system architectures, security controls, and organizational processes.
Evaluate and recommend improvements to security testing methodologies, offensive security capabilities, and assessment processes.
Contribute to strategic cybersecurity initiatives designed to improve the organization's ability to identify, detect, and respond to cyber threats.
Develop recommendations based on research, testing results, industry best practices, and empirical evidence.
Support security automation, process improvement, and capability development efforts across the Adversarial Security Practice.
Participate in team meetings, knowledge-sharing sessions, and cross-functional collaboration opportunities to gain exposure to a broad range of cybersecurity disciplines.
Complete an independent capstone project that delivers lasting value through security research, process improvement, capability development, or strategic recommendations.