The Nuclear Company
Spring 2027 Security Engineer Intern
Washington, DC +1 · Internship · Posted Oct 28, 2026
- Location
- Washington, DC
Washington, District of Columbia, United States - Experience
- No number of years specified; requires experience completing a working technical project.
- Education
- Currently enrolled in a BS in Computer Science, Software Engineering, Computer Engineering, Cybersecurity, or a related technical field; must return to school afterward.
- Visa sponsorship
- U.S. Person status (U.S. citizen or lawful permanent resident) is required; the company does not sponsor visas for this role.
About the job
Supports the Product Security team in securing NOS and its cloud systems through application and cloud security, automation, detection, and compliance projects.
What you'll do
- Build scripts, tools, and automation to help engineering teams develop secure software.
- Help identify and address security risks in applications, APIs, AWS workloads, and development pipelines; participate in threat modeling, reviews, and security testing.
- Investigate security-tool findings, improve cloud security visibility and detections, and document work.
What they ask for
- Currently enrolled in a relevant technical BS program and returning to school after the term.
- Available for the full six-month co-op term.
- Completed a working technical project through coursework, independent work, a student team, or an internship.
- Able to explain technical work clearly and learn from engineers in different disciplines.
Nice to have
- A project involving application or cloud security, security automation, detection engineering, or AI-enabled cyber defense.
- Programming fundamentals in at least one language such as Python, TypeScript, Java, or Go.
Pay
$25.00 per hour (starting rate); $2,000 monthly housing stipend
Tools
NOS, AWS, Python, TypeScript, Java, Go
AI focus
The company expects employees to use AI in their work; this role may involve AI-enabled cyber defense as a preferred project area.
Model-written summary · the original posting is authoritative