Apply on Employer Site

Sigma · 2 days ago

Product Security Graduate Intern (Summer 2026)

San Francisco, CA

Internship

Hybrid

Intern

$50/hr - $50/hr

Start in 2026 Spring

Sigma is a company that delivers cloud-scale analytics and business intelligence, empowering business professionals and data teams. They are seeking a Product Security Graduate Intern to work on various security tasks and gain exposure to security engineering for scalable systems.

AnalyticsBusiness IntelligenceCloud Data ServicesComputerSoftware

Comp. & Benefits

No H1B

Responsibilities

Participate in threat modeling and security design reviews for new and existing features, including AI-enabled product capabilities

Assist with application security code reviews, with an emphasis on identifying systemic patterns and classes of vulnerabilities

Perform offensive security assessments, including penetration and red team style testing, and adversarial simulation, to proactively identify vulnerabilities and strengthen defenses

Research, test, and validate potential security issues across Sigma cloud environment, network application services and data flows

Triage and verify reported vulnerabilities using a data-driven approach, perform root cause analysis, and partner with engineers to drive remediation

Design, build, or extend security pipelines that leverage AI or ML to improve signal quality, prioritization, or developer experience

Track security metrics and produce clear documentation for areas of ownership

Scope, design, and deliver projects in collaboration with Product Security and Engineering mentors, with the option to focus on an AI-driven security initiative or a core product security problem

Qualification

PythonApplication SecurityThreat ModelingSecurity VulnerabilitiesCuriosityCommunication SkillsSelf-starter

Required

Current graduate student: You must be currently enrolled in a university graduate degree program in the U.S with a graduation date of December 2026 or later

Able to intern from May / June 2026 through August / September 2026 (12 weeks)

Authorization: You must be legally authorized to work in the US during the Summer 2026 program

Visa sponsorship is not available for our internship positions

Location: Located within the San Francisco Bay Area or willing to relocate during the internship. Relocation assistance will be provided for students who will need to relocate for the summer

Able to work 40 hours per week (full-time) in a hybrid work model with a minimum of 4 days in office for in person collaboration with our team

Currently pursuing a Master's degree in Computer Science, Engineering, or a related field, with a demonstrated interest / experience in security

Hands on development experience in one or more of the following: Python, Go, Rust, TypeScript, JavaScript, or Java

Solid understanding of common product security vulnerabilities (e.g., authn/authz issues, injection, data exposure, isolation failures) and typical mitigation strategies

Self-starter who can take security problems, break them down, and drive them forward with minimal oversight

Curiosity about modern attack techniques and a willingness to experiment, learn, and think adversarially

Strong written and verbal communication skills, with the ability to explain security findings clearly to engineering partners

A pragmatic mindset focused on improving security without unnecessarily impacting developer productivity or delivery velocity