Summer 2027 Internship - Information Security Engineer

The role

You will attack General Matter's products and infrastructure, including web apps, APIs, cloud environments, and industrial controllers. You will work with engineers to fix vulnerabilities found through offensive testing, code audits, and design reviews.

What you will do

• Break everything you touch, then help us fix it.
• Run penetration tests against networks, services, web applications, and APIs.
• Audit source code and features for security vulnerabilities.
• Build static analysis rules or CI checks.
• Reverse engineer and attack embedded devices and industrial equipment.
• Do threat modeling and adversarial design reviews.
• Assess third-party software, devices, and services.
• Attack cloud and identity infrastructure.
• Build automated tooling to spot security exposures.
• Present findings and fixes to engineers and leaders.

Required qualifications

• Currently pursuing a Bachelor's, Master's, or PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field
• Security experience in one or more of the following: C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, or network protocols.
• A strong understanding of common vulnerability classes and how to exploit them, such as SQLi, XSS, CSRF, SSRF, memory corruption, and authentication or authorization flaws.
• Experience auditing code and features, and comfort reading large codebases you didn't write.
• Strong investigative and analytical problem-solving skills.
• Clear written communication.
• Willing and able to work on-site in Los Angeles, CA, full-time (40 hours/week), for the whole internship.

Nice to have

• Hands-on offensive security experience such as CTF competitions, bug bounties, CVEs, security research, or homelab projects.
• Experience with fuzzing (AFL++, libFuzzer), static analysis (Semgrep, CodeQL), and sandboxing or exploit mitigations.
• Experience with tools like Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, or Metasploit.
• Hardware hacking experience, such as firmware dumps, UART/JTAG/SWD, logic analyzers, or fault injection basics.
• Experience with industrial control systems, PLCs, SCADA, or OT protocols.
• Experience attacking Windows/Active Directory, Linux, cloud (AWS, Azure, GCP), containers, or Kubernetes.
• A GitHub, blog, CTF writeup, CVE, or bug bounty profile.

Benefits

• Monthly housing stipend
• Eligible for overtime pay

About the company

General Matter enriches uranium and is designing, building, and operating low-cost enrichment services in the US. The company is mission-driven with a culture of urgency, accountability, and transparency.