Year-Round Intern - Application Security
About The Position
The Options Clearing Corporation (OCC) is seeking a Year-Round Intern for its Application Security team. This internship is a 12-month opportunity running from January through December, designed for undergraduate or graduate students actively enrolled in college or university. Interns will work up to 20 hours per week during the school year and up to 40 hours per week during the summer, with a maximum of 1,000 hours total. The role operates in a hybrid work environment, requiring at least 3 days per week in the OCC office, with Tuesdays and Wednesdays as anchor days. This position offers a chance to gain hands-on experience at the intersection of application security, software engineering, and frontier AI, contributing to meaningful projects that impact the organization's security practices.
Requirements
- Rising senior or second-year graduate student, graduating December 2027 or May/August 2028.
- Desired Majors: Computer Science, Cybersecurity / Information Security, Software Engineering, Computer Engineering, Management Information Systems.
- Basic programming/scripting ability (Python, Bash, or similar) needed for automation work.
- Familiarity with software development concepts and the SDLC.
- Understanding of version control (Git/GitHub).
- Basic familiarity with AI/LLM tools and concepts (Claude, GitHub Copilot, Cursor, or similar).
- Ability to work collaboratively across technical teams and communicate findings clearly to both security and non-security audiences.
- Self-starter who can take ownership of deliverables and drive work forward with minimal supervision.
- Strong written communication — the intern will be producing standards documentation that developers will read and follow.
- Curiosity and willingness to learn — AppSec sits at the intersection of security, development, and AI, so adaptability matters.
- Attention to detail.
Nice To Haves
- Exposure to CI/CD concepts (GitHub Actions, Jenkins, etc.) a plus.
- Familiarity with security concepts — OWASP Top 10, common vulnerability classes a plus.
- Experience with any security tooling (Snyk, SonarQube, Burp Suite, etc.) a plus.
- Familiarity with static analysis or code review a plus.
- Basic understanding of APIs and how applications communicate a plus.
- Exposure to cloud environments (AWS, Azure, GCP) a plus.
- Experience with prompt engineering or structuring AI-consumable instruction files (e.g., markdown-based configuration such as Claude.md) a plus.
Responsibilities
- Using frontier AI models and LLMs as core engineering tools to research, synthesize, and codify OCC-specific secure coding standards based on industry frameworks (OWASP, NIST, CIS).
- Building AI-consumable configuration files (e.g., Claude.md) that embed security requirements directly into AI-assisted developer workflows and GitHub repositories across OCC.
- Automating the enforcement of security standards within CI/CD pipelines and developer tooling (Snyk, SAST/DAST tools, GitHub), writing real automation that runs in production workflows.
- Collaborating with development teams to integrate and test security standards in real developer environments.
- Assisting with vulnerability triage and remediation guidance, gaining exposure to real-world security findings alongside experienced AppSec engineers.
Benefits
- Paid sick leave accrued based on hours worked.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Part-time
Career Level
Intern
Education Level
No Education Listed
