Security Engineer Intern, Summer 2027

About the role

Atlassian is looking for a Security Engineer Intern for its summer 2027 program, working in the Security team that protects services used by tens of thousands of customers. The internship is hybrid, based in Seattle, WA or San Francisco, CA, and reports to a Security Engineering Manager with guidance from a team mentor. It is not eligible for F1/J1 students and is not available for work sponsorship.

Key responsibilities

• Own a scoped security engineering project, from understanding the problem to building, testing and documenting the solution, with guidance from a senior engineer.
• Develop tools and automation that help engineers find security weaknesses, investigate findings or prioritize risks.
• Conduct security research and analyze results, distinguishing actionable findings from false positives.
• Use AI-assisted coding and research tools while validating their outputs; build AI-assisted security capabilities or investigate risks in AI-enabled systems depending on the project.
• Collaborate with security and software engineers through design discussions, code reviews and regular feedback.
• Demonstrate the solution, explain its results and limitations, and prepare it for others to use and maintain.

Required profile

• Able to commit to a 12-week full-time (40 hours per week) program during Summer 2027.
• Currently enrolled full-time in a bachelor's or master's degree program, returning after the internship and graduating by August 2028.
• Strong programming skills, including writing, debugging and testing code.
• Basic understanding of how web applications and systems work, along with foundational security concepts.
• Familiarity with AI and large language models, with hands-on experience through coursework, projects, research or previous work.
• Ability to investigate problems, evaluate information and communicate findings clearly.
• Demonstrated interest in security through coursework, personal projects, capture-the-flag challenges, research or previous experience.

Required skills

• Preferred: security tools such as Burp Suite, OWASP ZAP, Semgrep or Snyk.
• Preferred: scripting or tool building in Python, JavaScript/TypeScript, Go or another language, with exposure to Git, APIs and automated testing.
• Preferred: building projects with LLM APIs or coding assistants, with examples of validation.
• Preferred: participation in CTFs, security research, open-source contributions or labs such as PortSwigger Web Security Academy, picoCTF or Hack The Box.
• Preferred: CompTIA Security+, ISC2 CC or equivalent knowledge shown through coursework and projects.

Pay is paid by the hour in three US geographic zones: Zone A $59-$67, Zone B $54-$60, Zone C $49-$56. Candidates should confirm their zone with the recruiter.