Security Engineer (Internship)

Join SeatGeek, a company dedicated to modernizing the ticketing industry. As a Security Engineering Intern, you'll gain hands-on experience in various aspects of security, including application security, threat modeling, detection engineering, and incident response. You'll collaborate with engineering teams, assist in threat modeling and architecture reviews, participate in security assessments, and contribute to automation and tooling projects. This internship offers a flexible work environment, access to health insurance, paid time off, and a monthly ticket-purchase stipend for live events.

• Collaborate with engineering teams to provide security guidance on new products and technologies, assist in threat modeling and architecture reviews.
• Participate in regular security assessments through basic penetration testing and code reviews of SeatGeek products, learn and promote secure coding practices.
• Help engineer and enhance security controls to harden our AWS environment and improve visibility, contribute to automation and tooling projects.

• (Preferred) Experience or strong interest in automating security tasks and scaling security processes through tooling
• Understanding of secure software development practices, threat modeling, and knowledge of common security vulnerabilities (like OWASP Top Ten)
• You’re graduating in spring/summer 2028
• Curiosity and a desire to learn how things work under the hood
• (Preferred) Regularly participate in CTF, bug bounty hunting, and hackathons (bonus points if you share your Bugcrowd/HackerOne/HackTheBox profiles)
• Ability to think like an attacker when securing applications, using that mindset to identify potential vulnerabilities and drive meaningful improvements in code security and defensive measures
• (Preferred) Familiarity with modern architectures, including microservices, Kubernetes, AWS, and other cloud technologies
• Proficiency in two or more programming languages (Python, C#, Go) and a solid grasp of coding and code review (yes, there’s a coding interview)
• (Preferred) Contributions to the security community (public research, blogging, presentations, etc.)