Summer Intern 2027 - Product Security Engineering Intern
- Term
- Summer 2027
- Pay
- $60 - $70
- Deadline
- Not published
- Visa
- Not stated
Company Overview
ID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly login across websites without having to create a new login and verify their identity again. Over 175 million users experience streamlined login and identity verification with ID.me at 22 federal agencies, 50 state government agencies, and more than 100 healthcare organizations. Over 600 consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me’s technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to “No Identity Left Behind” to enable all people to have a secure digital identity. To learn more, visit https://network.id.me/.
ID.me is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings.
At ID.me, we embrace the thoughtful use of AI tools in our daily work and there are even occasions where we leverage AI in our hiring process. However, during the interview process, we want to understand your individual skills and experiences. Therefore, we have guidelines on how AI can be appropriately used during your application and interviews which can be found here.
About the role
ID.me is hiring a Product Security Engineering Intern for Summer 2027. You will join the Product Security team, which keeps the platform that verifies identities for over 156 million people across 21 federal agencies, 50 state agencies, and more than 600 businesses secure by design.
This is a hands-on engineering internship, not a shadowing program. You will own a scoped project from start to finish, ship real improvements to how we build and run software, and present your results to security and engineering leadership at the end of the summer.
Location: Mountain View, California
What you'll do
- Partner with engineering teams on threat models and security design reviews for new features and services.
- Triage findings from static analysis (SAST), dependency scanning (SCA), secrets detection, and container scanning, and help engineers fix them.
- Build or improve automation that brings security checks into CI/CD pipelines and developer workflows.
- Help assess and improve the security posture of our cloud environments, including cloud security posture management (CSPM) and container runtime tooling.
- Perform focused code reviews and security testing against industry-standard and internal security frameworks and requirements.
- Write clear documentation, secure coding guidance, and runbooks that engineers will actually use.
- Deliver an intern capstone project and present it to the team at the end of the summer.
- Your capstone will go deep on one or two of the areas above rather than touching all of them; your mentor will help you pick the one with the clearest scope and the most direct line to a shipped improvement.
What we're looking for
- Currently pursuing a Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field.
- Working knowledge of common web application vulnerabilities (injection, XSS, broken authentication, access control flaws) and how to prevent them.
- Familiarity with Git, the Linux command line, and basic networking concepts (HTTP, TLS, DNS).
- Curiosity, a builder's mindset, and the ability to explain technical risk clearly to engineers who are not security specialists.
- Must be authorized to work in the United States.
- Must be able to pass a standard background check, consistent with our work for government agencies and regulated industries.
Nice to have
- Experience with a major cloud provider, containers, or container orchestration. * Hands-on experience with application security testing and scanning tools.
- CTF participation, bug bounty findings, a security club, open-source contributions, or a home lab you can talk about.
- Coursework or projects in applied cryptography, identity and access management, or authentication protocols (OAuth 2.0, OpenID Connect, SAML).
- Interest in identity, fraud prevention, or privacy.
What you'll gain
- A dedicated mentor on the Product Security team and regular 1:1s with security leadership.
- Real-world experience securing a high-scale identity platform that operates under strict compliance requirements (NIST 800-63, FedRAMP, SOC 2).
- Practical depth in application security, cloud security, and DevSecOps that maps directly to full-time security engineering roles.
- A shipped project and a final presentation you can point to in future interviews.
The annual base salary listed does not include a company bonus, incentive for sales roles, equity and benefits which will be determined based on experience, skills, education, relevant training, geographic location and role.
IDMe offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit.
Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors.
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations.
Please review our Privacy Policy, including our CCPA policy, at id.me/privacy. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
ID.me participates in E-Verify.