About the role#
The Secure Development Engineering team helps development teams incorporate security processes and tools into the software development lifecycle. We are looking for a Summer Associate to join our team for a 12-week internship. You will work on projects to reduce risk across our application portfolio, focusing on secure development enablement and the optimization of Static Application Security Testing (SAST) and Software Composition Analysis (SCA) capabilities.
What you'll do#
- Assist with onboarding applications and repositories into SAST and SCA tools.
- Support scan monitoring, coverage validation, and troubleshooting.
- Analyze security findings, identify trends, and support vulnerability triage.
- Maintain onboarding records, scan status information, and remediation tracking data.
- Participate in tool evaluations, testing, and process improvements.
- Collect and analyze data regarding tool coverage, security findings, and program participation.
- Create reports, dashboards, presentations, and status updates.
- Support the development and maintenance of program metrics.
- Create and maintain onboarding guides, technical documentation, FAQs, and best practices.
- Develop content for SharePoint sites, training portals, newsletters, and internal knowledge bases.
- Translate technical security concepts into clear and actionable guidance.
- Support research, meeting coordination, and action-item tracking.
- Support Security Champions meetings, training sessions, workshops, and communications.
- Assist with developer engagement and the adoption of secure development practices.
- Gather feedback from stakeholders to identify opportunities for improvement.
What you'll need#
- Current enrollment in a bachelor’s or master’s degree program in Cybersecurity, Information Technology, Computer Science, Software Engineering, Information Systems, Data Analytics, or a related field.
- Graduation date of December 2027 or later.
- Basic understanding of cybersecurity, application security, and secure software development.
- Familiarity with SAST and SCA tools and their role in identifying vulnerabilities.
- Basic knowledge of source code repositories, software dependencies, and open-source components.
- Experience with at least one programming or scripting language, such as Java, Python, JavaScript, C#, or PowerShell.
- Proficiency with Microsoft 365 applications, including Excel, PowerPoint, Teams, and SharePoint.
- Strong analytical, organizational, and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to work independently and collaboratively in a team environment.
- Detail-oriented approach with a commitment to accuracy.
- Eagerness to learn new technologies, tools, and security concepts.
Location & details#
- Location: 820 Follin Ln SE, Vienna, VA.
- Term: 12 weeks, May 2027 through August 2027.
- Schedule: Monday through Friday, 8:00 AM to 4:30 PM.
- Work Modality: On-site.
- Compensation: This is a paid internship.
About Navy Federal Credit Union
Navy Federal Credit Union is a nonprofit financial institution founded in 1933. It serves the Armed Forces, Department of Defense, veterans, and their families. With over 15 million members and more than 25,000 employees, it operates as the largest credit union in the world. The organization maintains its headquarters in Vienna, Virginia, alongside additional campuses in Florida, California, and Virginia.
How to get in at Navy Federal Credit Union
Securing an internship at Navy Federal Credit Union requires speed because early applicants are often reviewed before the candidate pool becomes unmanageable. Intern Insider sends an instant alert the moment a role matching your target is published anywhere, helping you apply among the first. This timing often makes the difference between being seen and getting lost in a high volume of submissions. You can also improve your chances by reaching out to the right people. Intern Insider surfaces the recruiters behind the company roles so you can reach out directly to ask about the position or a referral. This approach often improves response rates compared to submitting an application into a general queue.
