Job description

The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later. SAST and SCA Tool Support • Assist with onboarding applications and repositories into SAST and SCA tools. • Support scan monitoring, coverage validation, and basic troubleshooting activities. • Help analyze security findings, identify trends, and support vulnerability triage efforts. • Maintain onboarding records, scan status information, and remediation tracking data. • Participate in tool evaluations, testing activities, and process improvements. Data and Reporting • Collect and analyze data related to tool coverage, security findings, remediation progress, and program participation. • Create reports, dashboards, presentations, and status updates. • Support the development and maintenance of program metrics. Documentation and Content Development • Create and maintain onboarding guides, technical documentation, FAQs, and best practices. • Develop content for SharePoint sites, training portals, newsletters, and internal knowledge bases. • Help translate technical security concepts into clear and actionable guidance. Administrative Support • Maintain program documentation, tracking systems, and team records. • Support research, testing, meeting coordination, and action-item tracking. • Assist the Secure Development Engineering team with additional projects and initiatives as assigned. Program Coordination and Engagement • Support Security Champions meetings, training sessions, workshops, and communications. • Assist with developer engagement and adoption of secure development practices. • Gather feedback from stakeholders and help identify opportunities for improvement • Currently enrolled in a bachelor’s or master’s degree program in Cybersecurity, Information Technology, Computer Science, Software Engineering, Information Systems, Data Analytics, or a related field. • Basic understanding of cybersecurity, application security, and secure software development concepts. • Familiarity with SAST and SCA tools and their role in identifying security vulnerabilities. • Basic knowledge of source code repositories, software dependencies, and open-source components. • Experience with at least one programming or scripting language (e.g., Java, Python, JavaScript, C#, or PowerShell). • Proficiency with Microsoft 365 applications, including Excel, PowerPoint, Teams, and SharePoint. • Strong analytical, organizational, and problem-solving skills. • Excellent written and verbal communication skills. • Ability to work independently and collaboratively in a team environment. • Detail-oriented with a strong commitment to accuracy. • Eagerness to learn new technologies, tools, and security concepts. Additional Information Hours: • Monday – Friday, 8:00 AM – 4:30 PM Location: • 820 Follin Ln SE, Vienna, VA 22180 The Secure Development Engineering team supports development teams in incorporating application security activities, processes, and tools throughout the software development lifecycle. The team helps reduce risk across Navy Federal’s application portfolio through secure development enablement, Security Champion engagement, and the adoption and optimization of Static Application Security Testing (SAST) and Software Composition Analysis (SCA) capabilities. We are seeking a motivated, detail-oriented, and technically curious Summer Associate to support secure development and application security workstreams. The Summer Associate will work closely with the Secure Development Engineering team to help operate and improve the Security Champions Program and support SAST and SCA tool activities.

Requirements

Must-haves

SAST and SCA Tool Support
Assist with onboarding applications and repositories into SAST and SCA tools.
Support scan monitoring, coverage validation, and basic troubleshooting activities.
Help analyze security findings, identify trends, and support vulnerability triage efforts.
Maintain onboarding records, scan status information, and remediation tracking data.
Participate in tool evaluations, testing activities, and process improvements.
Data and Reporting
Collect and analyze data related to tool coverage, security findings, remediation progress, and program participation.
Create reports, dashboards, presentations, and status updates.
Support the development and maintenance of program metrics.
Documentation and Content Development
Create and maintain onboarding guides, technical documentation, FAQs, and best practices.
Develop content for SharePoint sites, training portals, newsletters, and internal knowledge bases.
Help translate technical security concepts into clear and actionable guidance.
Administrative Support
Maintain program documentation, tracking systems, and team records.
Support research, testing, meeting coordination, and action-item tracking.
Assist the Secure Development Engineering team with additional projects and initiatives as assigned.
Program Coordination and Engagement
Support Security Champions meetings, training sessions, workshops, and communications.
Assist with developer engagement and adoption of secure development practices.
Gather feedback from stakeholders and help identify opportunities for improvement
Currently enrolled in a bachelor’s or master’s degree program in Cybersecurity, Information Technology, Computer Science, Software Engineering, Information Systems, Data Analytics, or a related field.
Basic understanding of cybersecurity, application security, and secure software development concepts.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

javapythonjavascript

Platform: oracle-cloud
Effort: medium