Spring 2027 Security Engineer Intern
A six-month Spring 2027 co-op on The Nuclear Company's Product Security team in Washington, D.C. (on-site 3 days/week), securing the NOS platform and its AWS/cloud systems. The intern builds security automation, does threat modeling and security testing, improves cloud detections, and supports GRC work for $25/hour.
- Compensation
- $25 / hr
- Location
- Washington, D.C.
- Work setup
- Not specified
- Seniority
- Intern
- Employment
- Internship
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Currently enrolled in a BS in Computer Science, Software Engineering, Computer Engineering, Cybersecurity, or related technical field; available for the full term and returning to school afterward
- Experience completing a working technical project through coursework, independent work, a student team, or a prior internship
- Ability to explain technical work clearly and learn from engineers in different disciplines
- U.S. Person status (U.S. citizen or lawful permanent resident) required due to export controls; no visa sponsorship for this role
Nice to have
- A project involving application security, cloud security, security automation, detection engineering, or AI-enabled cyber defense
- Interest in AI-enabled software, energy, national security, industrial software, or regulated industries
- Programming fundamentals in at least one language such as Python, TypeScript, Java, or Go
Full description
The Nuclear Company is the fastest growing AI tech-enabled startup in the nuclear and energy space, pioneering a fleet-scale approach to building the next generation of nuclear reactors. Through our design-once, build-many model, we're accelerating the deployment of safe, reliable, and affordable nuclear energy.
We operate with an AI-first mindset. Every employee is expected to leverage AI, technology, and the Nuclear Operating System (NOS) as integral components of their role to improve the quality, speed, and impact of their work. We expect every team member to continuously identify opportunities to automate workflows, enhance decision-making, improve processes, and contribute to the ongoing evolution of NOS as a strategic operating capability that enables The Nuclear Company to scale with excellence.
We hire people who are driven by purpose, thrive in ambiguity, and are energized by building what has never been built before. Our team combines intellectual curiosity with high agency, embraces candid feedback and continuous learning, and holds themselves and others to exceptional standards. Our values—Transparency, Responsibility, Unity, Scrappy, and Tenacity—guide how we hire, collaborate, and make decisions every day. They are not words on a wall; they are the standard by which we operate. TRUST is the foundation of our safety culture, fostering intellectual honesty, accountability, and open communication, while our values challenge every team member to execute with urgency, humility, resilience, and an unwavering commitment to our mission.
About the role
The United States is building nuclear power again, and The Nuclear Company is building the software that helps make it possible. NOS supports the regulatory, supply chain, cost, schedule, and field work behind reactor construction.
As a Security Engineer Intern, you will join the Product Security team to help secure NOS and the cloud systems that support it. You will work with security and software engineers on meaningful projects across application security, cloud security, and governance, risk, and compliance (GRC). You might help assess a new product feature from a security perspective, strengthen a cloud control, improve a detection, or document evidence of compliance with a given cybersecurity framework. You will have a mentor and the opportunity to own a scoped project from design to delivery.
This is a six-month Spring 2027 co-op based in Washington, DC, on-site three days a week.
Responsibilities
- Build scripts, tools, and automation that help engineering teams develop secure software.
- Help identify and address security risks in applications, APIs, AWS workloads, and development pipelines.
- Participate in threat modeling, design and code reviews, and security testing with guidance from the team.