Summer 2027 Internship - Information Security Engineer
Generalmatter · Los Angeles, CA
About this role
**Summer 2027 Internship — Information Security Engineer** **About the company** General Matter enriches uranium. We design, build, and operate the world’s lowest-cost enrichment services in the US—restoring America’s ability to produce nuclear fuel for AI, advanced manufacturing, and critical industries. **About this role** General Matter builds its own technology (software, firmware, control systems, and infrastructure) that runs an industrial nuclear fuel facility. The Security team finds gaps before anyone else does through offensive testing, code audits, design reviews, and hardening. As an intern, you’ll attack General Matter’s products and infrastructure and work with the engineers who own them to fix what you find. Targets include web apps, APIs, Linux/Windows hosts, cloud environments, embedded devices, and industrial controllers. You’ll own real projects from start to finish. **Responsibilities** - Break everything you touch, then help us fix it. - Run penetration tests against networks, services, web applications, and APIs—back findings with working proof-of-concept exploits. - Audit source code and features for security vulnerabilities (e.g., Python, C, C++, Rust, Go, TypeScript). Build static analysis rules or CI checks to prevent the same bug class from returning. - Reverse engineer and attack embedded devices and industrial equipment in an isolated test bench (firmware extraction, binary analysis on x86/ARM, debug interfaces like JTAG/SWD/UART, and OT protocols such as Modbus, EtherNet/IP, OPC UA). - Perform threat modeling and adversarial design reviews with software, controls, and hardware engineers to design secure architectures before shipping. - Assess third-party software/devices/services before they enter the environment; partner with vendors/suppliers to remediate issues. - Attack cloud and identity infrastructure (IAM misconfigurations, exposed secrets, privilege escalation paths, CI/CD supply chain weaknesses). - Build automated tooling to detect known security exposures and keep it running after your internship ends. - Present findings and fixes to the engineers and leaders who own the systems. **Basic qualifications** - Currently pursuing a Bachelor’s, Master’s, or PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field. - Security experience in one or more of: C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, network protocols. - Strong understanding of common vulnerability classes and exploitation (e.g., SQLi, XSS, CSRF, SSRF, memory corruption, authentication/authorization flaws). - Experience auditing code/features and comfort reading large codebases you didn’t write. - Strong investigative and analytical problem-solving skills. - Clear written communication. **Preferred skills and experience** - Hands-on offensive security experience (CTFs, bug bounties, CVEs, security research, homelab projects). - Fuzzing (AFL++, libFuzzer), static analysis (Semgrep, CodeQL), and sandboxing/exploit mitigations. - Tools such as Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, or Metasploit. - Hardware hacking experience (firmware dumps, UART/JTAG/SWD, logic analyzers, fault injection basics). - Industrial control systems/OT protocol experience (PLC/SCADA/OT) is a plus. - Experience attacking Windows/Active Directory, Linux, cloud (AWS/Azure/GCP), containers, or Kubernetes. - A GitHub, blog, CTF writeup, CVE, or bug bounty profi
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.