Summer 2027 Internship

About This Role

General Matter builds its own technology, including software, firmware, control systems, and infrastructure for an industrial nuclear fuel facility. The Security team's role is to identify and mitigate security vulnerabilities before they can impact the real world. This is achieved through offensive testing, code audits, design reviews, and system hardening.

As an intern, you will attack General Matter's products and infrastructure, collaborating with engineers to remediate identified issues. Your work will encompass web applications, APIs, Linux and Windows hosts, cloud environments, embedded devices, and industrial controllers. You will own projects from inception to completion, focusing on practical security testing rather than policy development.

Key Responsibilities

• Identify and exploit vulnerabilities across General Matter's systems, then assist in fixing them.
• Conduct penetration tests against networks, services, web applications, and APIs, providing working proof-of-concept exploits.
• Audit source code and features for security vulnerabilities in languages such as Python, C, C++, Rust, Go, and TypeScript.
• Develop static analysis rules or CI checks to prevent recurrence of similar vulnerabilities.
• Reverse engineer and attack embedded devices and industrial equipment on an isolated test bench. This includes firmware extraction, binary analysis (x86 and ARM), utilizing debug interfaces (JTAG, SWD, UART), and understanding PLC and industrial protocol implementations (Modbus, EtherNet/IP, OPC UA).
• Perform threat modeling and adversarial design reviews with software, controls, and hardware engineers to help design secure system architectures.
• Assess third-party software, devices, and services for security risks and work with vendors to address issues.
• Attack cloud and identity infrastructure, focusing on IAM misconfigurations, exposed secrets, privilege escalation, and CI/CD supply chain weaknesses.
• Build automated tooling to detect known security exposures.
• Present findings and proposed fixes to relevant engineers and leaders.

Requirements & Tech Stack

• Python, C, C++, Rust, Go, TypeScript
• x86, ARM
• Cryptography
• Reverse Engineering
• Embedded Systems
• Network Protocols
• SQLi, XSS, CSRF, SS ক্ষRM, Memory Corruption, Authentication/Authorization Flaws
• Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, Metasploit
• Fuzzing (AFL++, libFuzzer)
• Static Analysis (Semgrep, CodeQL)
• JTAG, SWD, UART
• Modbus, EtherNet/IP, OPC UA
• AWS, Azure, GCP

Qualifications

• Currently pursuing a Bachelor's, Master's, or PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
• Security experience in one or more of the following: C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, or network protocols.
• Strong understanding of common vulnerability classes and exploitation techniques.
• Experience auditing code and features, with comfort reading unfamiliar codebases.
• Strong investigative and analytical problem-solving skills.
• Clear written communication skills.
• Hands-on offensive security experience (e.g., CTF competitions, bug bounties, CVEs, security research, homelab projects) is preferred.
• Experience with fuzzing, static analysis, sandboxing, or exploit mitigations is preferred.
• Hardware hacking experience (firmware dumps, UART/JTAG/SWD, logic analyzers, fault injection basics) is preferred.
• Experience with industrial control systems, PLCs, SCADA, or OT protocols is a plus.
• Experience attacking Windows/Active Directory, Linux, cloud (AWS, Azure, GCP), containers, or Kubernetes is preferred.
• A public profile (GitHub, blog, CTF writeup, CVE, bug bounty) demonstrating security work is a plus.

Additional Requirements

• Willing and able to work on-site in Los Angeles, CA, full-time (40 hours/week) for the entire internship duration.
• All testing will be conducted on General Matter-owned systems within an approved scope and rules of engagement.
• This position may require extended hours, and interns are eligible for overtime pay.

Compensation and Benefits

• Hourly pay range: $32–$46 per hour (dependent on student standing).
• Monthly housing stipend.
• Eligibility for overtime pay.