AI Security Engineer Intern (Summer 2027)

Rebuild how the world works, to make institutions work better for the people they serve.

Brain Co. builds AI-native operating systems for large, regulated institutions. Each system is built for a specific industry, powered by agents that push real workflows forward. Underneath it all is Atlas, our proprietary platform that keeps customers in control, secure by design, and never locked into one model.

Brain Co. is entering its next phase of production deployments on a national scale with an elite team built from Palantir, Google, Meta, and Nvidia, and a growing footprint across government, insurance, health, and financial services.

Joining now means shaping both the company and a new category of applied AI. Every project here ships to production and is expected to create measurable customer value and impact.

You'll work alongside exceptional peers on some of the hardest problems in applied AI. It’s the kind of work you'll still be proud of in ten years from now.

As an AI Security Engineer Intern, you’ll work alongside experienced security, platform, and infrastructure engineers to help build security directly into how Brain Co. develops and ships software.

This co-op is designed for current undergraduate juniors and seniors graduating no later than June 2028 who want hands-on experience securing real production systems. You’ll contribute to projects across CI/CD, cloud infrastructure, Kubernetes, containers, and Infrastructure-as-Code while receiving mentorship through code reviews, design discussions, and hands-on collaboration with the team.

This is a builder-focused security role. You’ll learn how security tooling and automated guardrails can make the secure path the easy path for engineers.

• Help build and improve security controls in CI/CD pipelines, including static analysis, secrets scanning, dependency checks, and automated policy enforcement.

• Contribute to developer-facing security tooling, such as linting rules, reusable workflows, automation, and guardrails.

• Help secure Kubernetes and containerized workloads, including access controls, image security, workload configuration, and deployment policies.

• Contribute to security baselines in Terraform and Infrastructure-as-Code, including IAM, networking, encryption, and secure defaults.

• Work with cloud infrastructure across AWS, GCP, or Azure to identify misconfigurations and improve security visibility.

• Help automate the detection and remediation of common security issues.

• Participate in threat modeling, code reviews, and architecture discussions alongside experienced security and platform engineers.

• Work with engineers to understand security findings and turn them into practical, actionable fixes.

• Help improve documentation and tooling so security controls are easy for developers to understand and adopt.

• Are a current juniors and seniors, graduating no later than June 2028, pursuing a degree in Computer Science, Engineering, Cybersecurity, or a related technical field.

• Have strong software engineering fundamentals through coursework, internships, research, or personal projects.

• Have experience programming in Python, Go, Java, C++, Bash, or a similar language.

• Have exposure to or a strong interest in application security, platform security, cloud security, or infrastructure security.

• Are familiar with or excited to learn technologies such as Kubernetes, Docker, Terraform, GitHub Actions, and AWS/GCP/Azure.

• Have an interest in how software moves from code to production, including CI/CD, containers, cloud infrastructure, and deployment workflows.

• Enjoy thinking about how systems can fail, where trust boundaries exist, and how security controls can prevent problems without slowing engineers down.

• Are curious, proactive, and excited to learn quickly in a fast-paced engineering environment.

• Enjoy taking ownership of technical problems while learning from experienced engineers.

• Coursework, projects, or internship experience involving cloud security, Kubernetes, or Infrastructure-as-Code.

• Familiarity with security tooling such as OPA, Conftest, Kyverno, Trivy, Semgrep, or similar tools.

• Experience with secrets management, IAM, or authentication and authorization systems.

• Interest in software supply chain security, including dependency security, image signing, SBOMs, or secure build pipelines.

• Experience building developer tools or automation.