Summer Intern 2027 - Product Security Engineering Intern

IDMe University Recruiting · Mountain View, CA

  • Internship
  • Internship
  • Posted 2026-11-02
  • Confirmed live on 10 November 2026

Apply at IDMe University Recruiting

Job description

Company Overview

IDMe is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with IDMe once and seamlessly login across websites without having to create a new login and verify their identity again. Over 175 million users experience streamlined login and identity verification with IDMe at 22 federal agencies, 50 state government agencies, and more than 100 healthcare organizations. Over 600 consumer brands use IDMe to verify communities and user segments to honor service and build more authentic relationships. IDMe’s technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. IDMe is committed to “No Identity Left Behind” to enable all people to have a secure digital identity. To learn more, visit https://network.id.me/.

IDMe is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings.

At IDMe, we embrace the thoughtful use of AI tools in our daily work and there are even occasions where we leverage AI in our hiring process. However, during the interview process, we want to understand your individual skills and experiences. Therefore, we have guidelines on how AI can be appropriately used during your application and interviews which can be found here.

About the role

IDMe is hiring a Product Security Engineering Intern for Summer 2027. You will join the Product Security team, which keeps the platform that verifies identities for over 156 million people across 21 federal agencies, 50 state agencies, and more than 600 businesses secure by design.

This is a hands-on engineering internship, not a shadowing program. You will own a scoped project from start to finish, ship real improvements to how we build and run software, and present your results to security and engineering leadership at the end of the summer.

Location: Mountain View, California

What you'll do

• Partner with engineering teams on threat models and security design reviews for new features and services.

• Triage findings from static analysis (SAST), dependency scanning (SCA), secrets detection, and container scanning, and help engineers fix them.

• Build or improve automation that brings security checks into CI/CD pipelines and developer workflows.

• Help assess and improve the security posture of our cloud environments, including cloud security posture management (CSPM) and container runtime tooling.

• Perform focused code reviews and security testing against industry-standard and internal security frameworks and requirements.

• Write clear documentation, secure coding guidance, and runbooks that engineers will actually use.

• Deliver an intern capstone project and present it to the team at the end of the summer.

• Your capstone will go deep on one or two of the areas above rather than touching all of them; your mentor will help you pick the one with the clearest scope and the most direct line to a shipped improvement.

What we're looking for

• Currently pursuing a Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field.

• Working knowledge of common web application vulnerabilities (injection, XSS, broken authentication, access control flaws) and how to prevent them.

• Familiarity with Git, the Linux command line, and basic networking concepts (HTTP, TLS, DNS).

• Curiosity, a builder's mindset, and the ability to explain technical risk clearly to engineers who are not security specialists.

• Must be authorized to work in the United States.

• Must be able to pass a standard background check, consistent with our work for government agencies and regulated industries.

Nice to have

• Experience with a major cloud provider, containers, or container orchestration. * Hands-on experience with application security testing and scanning tools.

• CTF participation, bug bounty findings, a security club, open-source contributions, or a home lab you can talk about.

• Coursework or projects in applied cryptography, identity and access management, or authentication protocols (OAuth 2.0, OpenID Connect, SAML).

• Interest in identity, fraud prevention, or privacy.

What you'll gain

• A dedicated mentor on the Product Security team and regular 1:1s with security leadership.

• Real-world experience securing a high-scale identity platform that operates under strict compliance requirements (NIST 800-63, FedRAMP, SOC 2).

• Practical depth in application security, cloud security, and DevSecOps that maps directly to f

Prepare for the interview

Nothing collected for this employer yet. The Blind 75 is what technical screens draw from; practice it here, with a coach, in Java or Python.

More at IDMe University Recruiting

More like this

All open software jobs