Summer Associate Internship (Product Security Engineer)

We are seeking a motivated and detail-oriented intern to support the Advanced Guardrails and Automation team within the Product Security Group. In this role, the intern will assist with initiatives focused on developing and improving automated Cloud and AI detection and prevention guardrails that help reduce security risk across Navy Federal’s application portfolio. The intern will work closely with team members to support program coordination, data analysis, documentation, reporting, and process improvement efforts that strengthen security practices across the organization. The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later. Support cloud security and governance initiatives through documentation, research, and analysis Assist in the development, testing, and validation of security automation workflows Help monitor and review security findings, compliance reports, and guardrail effectiveness Create and maintain technical documentation, process diagrams, and operational runbooks Develop dashboards and reports to support security metrics and operational visibility Conduct research on emerging cloud, automation, and AI security technologies Participate in security assessments and configuration reviews under supervision Assist with testing and troubleshooting automation solutions in development environments Contribute ideas for process optimization and operational efficiency improvements Collaborate with cross-functional teams to support security engineering initiatives Scripting fundamentals — Ability to write basic scripts, work with APIs, parse JSON, and automate small tasks using Python, PowerShell, Bash Cloud basics — Intro-level understanding of AWS, Azure, or GCP (resource types, IAM concepts, logging) Security concepts — Familiarity with vulnerabilities, least privilege, encryption, and secure coding principles. AI/ML familiarity — Exposure to LLMs, embeddings, or model inference; ability to use AI tools for analysis Data analysis — Ability to analyze logs, cloud events, or security findings using Python or AI tools Version control — Basic Git/GitHub usage for commits, branches, and pull requests Desired Qualifications Exposure to CSPM, CIEM, or container scanning tools Ability to craft prompts for AI-assisted analysis or summarization Understanding of Docker images, registries, and vulnerabilities Demonstrated interest in cloud, AI, or security Ability to break down issues and propose simple solutions Comfortable explaining findings to technical and non-technical audiences Additional Information Hours: Monday – Friday, 8:00 AM – 4:30 PM Location: 820 Follin Ln SE, Vienna, VA 22180