Information Security Engineer Intern Jobs

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Appian’s Information Security team operates at the heart of our Enterprise-Grade Orchestration ecosystem. We continuously evaluate the evolving cyber threat landscape, assess security risks, and enforce modern security frameworks. Our team ensures that Appian's cloud offerings and internal operations remain robust, compliant, and resilient so our global customers can innovate with total confidence. As an Information Security Intern at Appian, you won't just sit on the sidelines—you will actively contribute to live security operations, modern cloud architecture defense, and compliance automation. Working directly alongside industry experts at our vibrant McLean headquarters, you will gain hands-on exposure to cutting-edge cloud infrastructure, automated governance, and enterprise threat analysis, setting a solid foundation for a high-impact cybersecurity career. This internship is based at our headquarters in McLean, Virginia. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Interns in this program are expected to be in the office 5 days a week to fully experience our culture, learn directly from peers and mentors, and contribute to projects in a collaborative environment. Being in the office provides more opportunities to connect, learn, and celebrate with the exceptional people across Appian. Applicants considered for Summer 2027 - Students Only What You’ll Do Execute continuous monitoring activities to ensure continuous alignment with internal security controls, industry regu

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role Information Security's mission is to secure Palantir, and by extension, protect our customers and the critical data they trust us with. We want someone whose technical skill is matched by integrity and genuine curiosity about security. You'll thrive here if you're self-motivated, collaborative, and energized by hard problems with no manual. Much of our work is ambiguous by design; if chasing clear outcomes down unclear paths excites you more than it unsettles you, you'll fit right in. This internship comes with real impact, real autonomy, and the resources to make meaningful security improvements across Palantir. Backgrounds vary. What matters is curiosity, tenacity, and a drive to become a world-class security engineer. You'll be treated like a full-time engineer, given real ownership, trusted with real projects, and accountable for outcomes our customers depend on. Core Responsibilities Impact: We address meaningful and exciting projects that change the security of Palantir for the better. Ownership: We see projects through from beginning to end, working through any obstacles we may encounter. We trust each other to effectively handle time and priorities and give people the space to think for themselves. Collaboration: We work internally with people from a variety of backgrounds. We also work externally with our customers, to understand and tackle their problems. Growth: We believe experiential learning is one of the best teachers and encourage ourselves and our peers to seek new challenges and opportunities for growth, as well as find new ways to innovate and share knowledge. What We Value Strong desire to own i

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Information Security Engineer I Location: McLean, VA | Work Model: On-site (5 days/week) About the Team The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure. The Opportunity At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem. What You’ll Do Build and scale internal security systems to enable Appian InfoSec to quickly adapt, monitor, and defend against modern attacker techniques. Analyze and investigate complex security-related data pulled from a wide range of security products, logging devices, and endpoint monitors. Design and implement enhanced detection technologies across various Appian systems to proactively surface potential anomalies and vulnerabilities. Conduct comprehensive risk analysis on infrastructure assets and provide

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network. Core Responsibilities Engineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure Develop alerting and detection strategies to identify malicious or anomalous behavior, including new and novel defensive techniques that adapt to evolving adversary tactics and tradecraft Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate security events and active attacks across the enterprise, uncovering sophisticated threats and identifying patterns of behavior that indicate insider risk Influence and inform security controls designed to safeguard Palantir's most critical assets Partner closely with other members of the Information Security team to lead changes in the company

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network. Core Responsibilities Engineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure Develop alerting and detection strategies to identify malicious or anomalous behavior, including new and novel defensive techniques that adapt to evolving adversary tactics and tradecraft Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate security events and active attacks across the enterprise, uncovering sophisticated threats and identifying patterns of behavior that indicate insider risk Influence and inform security controls designed to safeguard Palantir's most critical assets Partner closely with other members of the Information Security team to lead changes in the company

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. WHAT WE OFFER Paid, full-time internships Post-internship career opportunities (full-time or part-time) Exposure to a fast-paced, fun, and inclusive culture A chance to work with world-class security experts on challenging, high-impact projects Opportunity to provide meaningful contributions to a real system used by customers High level of access to supervisors (manager and mentor), detailed direction without micromanagement, feedback throughout your internship, and a final evaluation Treated as a full member of the Snowflake team: company meetings and activities, flexible hours, casual dress code, swag, and much more Warsaw office perks: catered lunches, access to recreational games, happy hours, company outings, and more WHAT WE EXPECT Must be actively enrolled in an accredited college/university program during the internship period Desired majors: Computer Science, Computer Engineering, Electrical Engineering, Mathematics, or a related field Required coursework: algorithms, data structures, and operating systems Recommended coursework: information security, cryptography, cloud computing, database systems, or distributed systems Duration: 4 months + recommended Strong programming skills in Python or Java Solid knowledge of data structures and algorithms; familiarity with

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. As an intern at Affirm, you will be a contributing member of our outstanding engineering team, and as such you will work on meaningful projects and frequently ship code. Recent grads and past interns have built a real-time high-throughput data processing pipeline, developed an extensive automated testing framework, and built out our proprietary financial platform that is central to our long term company mission. We are excited to meet and consider strong students for our 12-16 week internships. We are a dynamic organization that is happy to tailor projects to your skills, and we will work with you throughout the interview process to determine which team will be best for you. What You'll Do Interns are responsible for developing and shipping a project and verifying that it works in production. Because things are changing fast at Affirm, we do not specify intern projects in advance, instead you will collaborate with your mentor and manager when you start to spec a project that will best contribute to your team. This role will ship code and monitor the deployment of your work. Our intern projects are not isolated or intended to be thrown away: your team will depend on your contributions! We pair interns with a dedicated mentor who will be by your side to give advice and ensure the success of your project. Expect to meet with them on a regular basis and receive feedback. There are opportunities to attend events with other interns and full-time Affirmers! Past events have included virtual cooking classes, executive fireside chats, cable car trolley tours, and Giants games. Interns present their work to the entire engineering organization at the end of the internship. What We Look For Passion and dedication to changing consumer banking for the better Experience with Python, C/C++ or Java Frontend

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. AI Security Engineer (Agentic SOC) Location: McLean, VA | On-site (5 days/week) ABOUT THE TEAM The Appian Information Security department continuously evaluates the global threat landscape to protect Appian operations and service offerings. Our mission is to build, monitor, and scale robust security tools and processes that shield critical corporate and customer assets from emerging threats, international security concerns, and vulnerabilities, ensuring our AI-Powered Process Automation platform remains resilient and secure. THE OPPORTUNITY At Appian, we believe our greatest innovations spring from in-person collaboration. Joining our team at our McLean headquarters means you will work alongside elite security architects in a high-velocity environment that prioritizes your professional growth. This role offers an unparalleled launchpad to transition academic knowledge into real-world impact, giving you direct ownership over intrusion detection capabilities and cloud-based defense strategies for our Enterprise-Grade Orchestration ecosystem. WHAT YOU'LL DO Build & Deploy Agents: Design, test, and deploy autonomous and semi-autonomous AI agents that integrate natively with our enterprise security stack (SIEM, EDR, XDR, and Threat Intel feeds). Code the Playbooks: Translate traditional, human-centric SOC playbooks and analyst workflows into deterministic and heuristic agentic pipelines (using DAGs and multi-agent routing). Optimize RAG Pipelines: Design, optimize, and maintain production-grade Retrieval-Augmented Generation (RAG) workflows to inject real-

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role Palantir's Offensive Security team probes our own products, infrastructure, and cloud environment the way a real attacker would. As an Offensive Security Engineer, you will test internal applications and infrastructure, chain findings into realistic attack paths, and work directly with the engineers responsible for the affected systems to get issues closed. A growing part of the team’s work is also developing agentic offensive security tooling: LLM-driven systems that encode operator tradecraft and apply it continuously. You will help in the design of that tooling and prove it out on live assessments. You will also help to coordinate third-party penetration testing engagements, scoping the work with specialized external firms, keeping assessments focused on the risks that matter, and turning their results into concrete remediation. Core Responsibilities Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across our products and internal tooling. Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold. Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations. Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations. Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements. Scope and

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role Palantir's Offensive Security team probes our own products, infrastructure, and cloud environment the way a real attacker would. As an Offensive Security Engineer, you will test internal applications and infrastructure, chain findings into realistic attack paths, and work directly with the engineers responsible for the affected systems to get issues closed. A growing part of the team’s work is also developing agentic offensive security tooling: LLM-driven systems that encode operator tradecraft and apply it continuously. You will help in the design of that tooling and prove it out on live assessments. You will also help to coordinate third-party penetration testing engagements, scoping the work with specialized external firms, keeping assessments focused on the risks that matter, and turning their results into concrete remediation. Core Responsibilities Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across our products and internal tooling. Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold. Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations. Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations. Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements. Scope and

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. About the InfoSec & IT Team The Application Security team helps Affirm build and launch products that earn customer trust, meet compliance obligations, and reduce business risk. We partner closely with product, engineering, infrastructure, risk, compliance, and other teams to identify security risks early, recommend pragmatic mitigations, and help teams find safe paths to launch. We are looking for an early-career Application Security Engineer who is curious, collaborative, and comfortable working with code. You will help assess application risks, support vulnerability management efforts, partner with engineering teams on secure design decisions, and contribute lightweight tooling, automation, and code-informed analysis that helps AppSec scale across Affirm. This role is a great fit for someone who has hands-on software or security experience, enjoys reading and reasoning about code, is actively developing offensive security skills, and wants to apply those skills in a product-minded, risk-based way. What You'll Do Partner with product and engineering teams to identify application security risks and help frame them as clear business risks, launch options, and recommended next steps. Read application code, configuration, pull requests, logs, and documentation to understand how systems work and where security risks may exist. Contribute small code changes, scripts, detections, tests, secure defaults, or automation that improve AppSec workflows and reduce recurring issues. Work in GitHub to review code changes, understand engineering context, participate in pull request discussions, track remediation work, and collaborate with engineers. Help evaluate vulnerabilities from internal testing, bug bounty reports, security tooling, penetration tests, and other sources; partner with teams to pri

Block builds simple, powerful tools that make progress towards an economy that’s truly open to all. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we’re helping build a financial system that is open to everyone. Join us. The Role The Platform Security team is responsible for securing Block's cloud, compute, and network infrastructure across multiple business units including Square, Cash, and Afterpay. We discover, track, and enable the business to remediate the most critical security risks across Block's cloud ecosystems (AWS and GCP). We drive the creation of cloud security policy and best practices, measure and aggregate deviations from these policies, and develop capabilities to estimate security risk based on cloud signals and business context. This work drives Block's cloud security strategy and is the lens through which Block measures progress of our cloud security posture over time. We believe that the secure option should be the easiest option for our users. We're looking for a strong Senior Platform Security Engineer with a deep understanding of securing cloud infrastructure and services at scale to help us execute on this vision. You Will Architect and evolve cloud security guardrails. Design and implement SCPs, GCP org policies, and IAM controls that shape how Block uses cloud infrastructure for years to come. Build automation to discover, measure, and contextualize security issues. Develop integrations with CSPM/DSPM tools and internal platforms to surface and prioritize findings. Own the cloud security exception lifecycle. Buil