Security Engineer Intern

Responsibilities

• Own a scoped security engineering project, from understanding the problem and exploring approaches to building, testing, and documenting the solution, with guidance from a senior engineer.

• Develop tools and automation that help engineers find security weaknesses, investigate findings, or prioritize risks.

• Conduct security research and analyze results to understand potential weaknesses and distinguish actionable findings from false positives.

• Use AI-assisted coding and research tools while validating their outputs. Depending on the project, build AI-assisted security capabilities or investigate risks in AI-enabled systems.

• Collaborate with security and software engineers through design discussions, code reviews, and regular feedback.

• Demonstrate your solution, explain its results and limitations, and prepare it for others to use and maintain.

Minimum Qualifications

• Able to commit to a 12-week full-time (40hrs/week) program during Summer 2027.

• Currently enrolled full-time in a bachelors or masters degree program and returning to the program after the completion of the internship, graduating by August 2028.

• Strong programming skills, including the ability to write, debug, and test code.

• Basic understanding of how web applications and systems work, along with foundational security concepts.

• Familiarity with AI and large language models, including hands-on experience through coursework, personal projects, research, or previous work.

• Ability to investigate a problem, evaluate information, and communicate findings clearly.

• Demonstrated interest in security through coursework, personal projects, capture-the-flag challenges, research, or previous experience.

Preferred Qualifications

Security tools: Using tools such as Burp Suite, OWASP ZAP, Semgrep, or Snyk to identify and investigate security weaknesses.

• Engineering and automation: Building scripts or tools in Python, JavaScript/TypeScript, Go, or another language, with exposure to Git, APIs, and automated testing.

• AI-assisted development: Building projects using LLM APIs or coding assistants, with examples of how you tested and validated the results.

• Practical security learning: Participation in CTFs, security research, open-source contributions, or labs such as PortSwigger Web Security Academy, picoCTF, or Hack The Box.

• Foundational certifications: CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent knowledge demonstrated through coursework and hands-on projects.

• Optional work samples: If you have a publicly shareable bug report, security write-up, or CTF walkthrough, please include a link with your application. We’d love to see how you investigated the problem, validated your findings, and explained the impact. Please do not share confidential information or undisclosed vulnerabilities.

About Atlassian
At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.

We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.

To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.

To learn more about our culture and hiring process, visit go.atlassian.com/crh.