Summer Intern 2027

About the Role

ID.me is hiring a Product Security Engineering Intern for Summer 2027. You will join the Product Security team, which keeps the platform that verifies identities for over 156 million people across 21 federal agencies, 50 state agencies, and more than 600 businesses secure by design.

This is a hands-on engineering internship, not a shadowing program. You will own a scoped project from start to finish, ship real improvements to how we build and run software, and present your results to security and engineering leadership at the end of the summer.

Location: Mountain View, California

Key Responsibilities

• Partner with engineering teams on threat models and security design reviews for new features and services.
• Triage findings from static analysis (SAST), dependency scanning (SCA), secrets detection, and container scanning, and help engineers fix them.
• Build or improve automation that brings security checks into CI/CD pipelines and developer workflows.
• Help assess and improve the security posture of our cloud environments, including cloud security posture management (CSPM) and container runtime tooling.
• Perform focused code reviews and security testing against industry-standard and internal security frameworks and requirements.
• Write clear documentation, secure coding guidance, and runbooks.
• Deliver an intern capstone project and present it to the team at the end of the summer.
• Your capstone will go deep on one or two of the areas above rather than touching all of them; your mentor will help you pick the one with the clearest scope and the most direct line to a shipped improvement.

Requirements & Tech Stack

• Currently pursuing a Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field.
• Working knowledge of common web application vulnerabilities (injection, XSS, broken authentication, access control flaws) and how to prevent them.
• Familiarity with Git, the Linux command line, and basic networking concepts (HTTP, TLS, DNS).
• Curiosity, a builder's mindset, and the ability to explain technical risk clearly to engineers who are not security specialists.
• Must be authorized to work in the United States.
• Must be able to pass a standard background check.

Nice to Have

• Experience with a major cloud provider, containers, or container orchestration.
• Hands-on experience with application security testing and scanning tools.
• CTF participation, bug bounty findings, a security club, open-source contributions, or a home lab.
• Coursework or projects in applied cryptography, identity and access management, or authentication protocols (OAuth 2.0, OpenID Connect, SAML).
• Interest in identity, fraud prevention, or privacy.

What You'll Gain

• A dedicated mentor on the Product Security team and regular 1:1s with security leadership.
• Real-world experience securing a high-scale identity platform that operates under strict compliance requirements (NIST 800-63, FedRAMP, SOC 2).
• Practical depth in application security, cloud security, and DevSecOps that maps directly to full-time security engineering roles.
• A shipped project and a final presentation you can point to in future interviews.