Security Engineer Intern

Break the App: Perform vulnerability assessments and penetration testing (VAPT) on our Web Applications, Android/iOS Apps, and APIs.

Automate Defense: Help integrate security tools (SAST/DAST) into our CI/CD pipelines. We believe security should move as fast as our code.

Code Review: Review source code for security flaws (like SQLi, XSS, IDOR) and help developers write secure code from day one.

Bug Triage: Analyze incoming bug reports from our Bug Bounty programs, validate them, and prioritize fixes.

Threat Modeling: Work with product and engineering teams during the design phase to identify potential security risks before a single line of code is written.

Learn & Evolve: Stay updated with the latest CVEs, zero-days, and security trends.

The Hacker Mindset: You have a deep understanding of the OWASP Top 10 (Web & Mobile) and know how to exploit and patch them.

Tool Wizardry: Hands-on experience with tools like Burp Suite, Metasploit, Nmap, Postman, or similar open-source security tools.

Coding Chops: You can read code (Python, Go, Java, or JavaScript) and write scripts to automate attacks or defenses.

Curiosity: You are a student of the game. You actively participate in CTFs, Bug Bounties, or have a rank on platforms like HackTheBox/TryHackMe.

Communication: You can explain a complex vulnerability to a developer without sounding like a robot.

Experience with Cloud Security (AWS/GCP).

A Hall of Fame mention in any major tech company's Bug Bounty program.

Open source security contributions.

Impact: You’ll be protecting the financial data of millions of teenagers. The bugs you find and fix will have a direct, real-world impact.

Mentorship: Work directly with founding members and senior engineers who have built systems at scale.

Perks: Competitive stipend, Certificate and Letter of Recommendation, Friendly leave policy, and cool Fam merchandise!