Office of the Comptroller of the Currency

Year-Round Intern - Application Security

Office of the Comptroller of the Currency
Apply
20 hours ago
Dallas, TX, USAIntern

Responsibilities

  • Use frontier AI models and LLMs to research, synthesize, and codify OCC-specific secure coding standards.
  • Build AI-consumable configuration files, such as Claude.md, for AI-assisted developer workflows and GitHub repositories.
  • Automate enforcement of security standards within CI/CD pipelines and developer tooling using Snyk, SAST/DAST tools, and GitHub.
  • Collaborate with development teams to integrate and test security standards in real developer environments.
  • Assist with vulnerability triage and remediation guidance alongside experienced application security engineers.

Requirements

  • Be a rising senior or second-year graduate student graduating in December 2027 or May/August 2028 and actively enrolled at a college or university.
  • Pursue a major in Computer Science, Cybersecurity/Information Security, Software Engineering, Computer Engineering, or Management Information Systems.
  • Have basic programming or scripting ability in Python, Bash, or a similar language.
  • Have familiarity with software development concepts, the SDLC, and version control using Git or GitHub.
  • Have basic familiarity with AI/LLM tools and concepts; exposure to Claude, GitHub Copilot, Cursor, CI/CD, security tooling, cloud environments, prompt engineering, or AI-consumable instruction files is preferred.
  • Have familiarity with security concepts such as the OWASP Top 10 and common vulnerability classes; exposure to static analysis or code review is preferred.
  • Understand APIs and how applications communicate.
  • Demonstrate collaboration, clear communication with technical and non-technical audiences, ownership, strong writing, curiosity, adaptability, and attention to detail.

Benefits

  • Year-round paid internship running January 2027 through December 2027, with up to 1,000 hours; interns may work up to 20 hours per week during the school year and up to 40 hours per week during summer.
  • Hybrid work arrangement in Dallas requiring at least three office days per week, with Tuesday and Wednesday as required anchor days and generally two additional remote days.
  • Interns are eligible only for paid sick leave accrued based on hours worked and do not receive other benefits or a technology stipend.
  • Overtime is not permitted.

Tech Stack

AWSAzureBashGitGitHub ActionsGoogle Cloud PlatformJenkinsPythonSonarQube

Categories

Contact me