Cybersecurity Intern

Job Title: Cybersecurity Intern - Summer 2027

About the Role

PayPal’s Cyber & Information Security (PCIS) team is seeking self-driven, detail-oriented Cybersecurity interns. Interns will be aligned to specific security and risk teams, gaining access to cutting-edge technologies and resources to stay at the forefront of the cyber threat landscape. The team focuses on empowering teams to secure their code and environments, providing visibility, tools, guidance, training, and support. The role involves preventing, identifying, and responding to critical vulnerabilities. Interns will work closely with various security and risk teams, business partners, and stakeholders to drive high-impact security and risk technology and services.

Key Responsibilities

Technology Focus

• Implement and test Next Gen platform security products as part of the SDLC to enable PayPal's product development.
• Perform quality code reviews to validate against secure coding guidelines.
• Drive vulnerability analysis and remediation.
• Identify, drive, and implement security process improvements.
• Collaborate closely with engineers, developers, security architects, product managers, program managers, and other teams.
• Stay up-to-date with the latest security trends, technologies, vulnerabilities, and attacks, and incorporate this knowledge into threat models.
• Determine the impact of vulnerabilities and communicate them to stakeholders.

Risk Focus

• Understand and apply enterprise policies, standards, and frameworks for governance, risk & compliance.
• Execute based on the Enterprise Risk Management standard for identifying, assessing, mitigating, monitoring, testing, and reporting on risks and controls.
• Work with stakeholders and external auditors to maintain documentation for scoping, testing, and remediation of risks and controls.
• Work with the central technology controls testing team to validate key controls and provide early warning to management.
• Assess audit findings/gaps, including control weaknesses, and assist with the development of risk-based management action plans.
• Support the development of tools and solutions for Technology Risk Management and identify opportunities for efficiencies.

Requirements & Tech Stack

Overall

• Passion for cybersecurity and learning through asking questions and experimenting.
• Willingness to collaborate and communicate effectively.
• Ability to take initiative and seek out opportunities to expand knowledge and skills.
• Ability to operate in a fast-paced, self-driven environment, taking initiative and ownership.
• Attention to detail, excellent analytical thinking, communication, and time management skills.

Technology

• Basic understanding of secure coding practices and common security vulnerabilities (e.g., OWASP Top 10).
• Experience with at least one programming language (e.g., Java, Python, JavaScript, Ruby).
• Interest in learning about application security, including tools like SAST, DAST, and SCA.
• Basic understanding of version control systems like Git.
• Experience working with large datasets to determine patterns.

Risk

• Interest in learning risk management methodologies, frameworks, and principles (e.g., SOX, COBIT, NIST, CSA, ITIL, PCI, GDPR).
• Ability to design repeatable, sustainable processes that operationalize the risk management function.

Qualifications

Internship Program Requirements

• This is a Summer 2027 Internship program.
• Must be legally authorized to work in the U.S. without sponsorship.
• Currently pursuing a bachelor’s or master’s degree in computer science, software engineering, or a related technical field at an accredited college or university.
• Must be returning to school in Fall 2027.