Internship, Offensive Security Engineer, Application Security (Summer 2026)

Consider before submitting an application:

This position is expected to start around January 2026 and continue through the Winter/Spring term (ending approximately May 2026) or continuing into Summer 2026 if available and there is an opportunity to do so. We ask for a minimum of 12 weeks, full-time and on-site, for most internships. Our internship program is for students who are actively enrolled in an academic program. Recent graduates seeking employment after graduation and not returning to school should apply for full-time positions, not internships.

International Students: If your work authorization is through CPT, please consult your school on your ability to work 40 hours per week before applying. You must be able to work 40 hours per week on-site. Many students will be limited to part-time during the academic year.

About the Team

We are looking for an enthusiastic Offensive Application Security Intern to join our team, where you'll conduct simulated attacks on web and mobile applications to identify vulnerabilities, exploit weaknesses, and recommend robust defenses. Responsibilities include performing penetration testing, code reviews, and threat modeling; developing custom tools and scripts for exploit automation; collaborating with development teams to remediate issues; and staying abreast of emerging threats like OWASP Top 10 risks. The ideal candidate loves to play CTFs, possesses strong programming skills in languages like Python or JavaScript, and has interest in ethical hacking, with a passion for proactive security in fast-paced environments.

• Hands-on penetration testing and simulated attacks on web, mobile, and API apps in a collaborative, fast-paced setting
• Regular code reviews and threat modeling with dev and DevOps teams to embed security in the SDLC
• Building and maintaining custom exploit tools/scripts in Python, Bash, or JavaScript for automated testing
• Researching emerging threats via conferences, CTF challenges, and bug bounty programs
• Blend of solo and team projects, including shaping security policies

• Currently pursuing a degree in Computer Science or a related field of study with a graduation date between 2026-2027
• Experience with secure architecture design
• Participation in Capture the Flag (CTF) events is ideal
• Security experience in one or more of: C, C++, PHP, Go,x86, ARM, CAN, cryptography, reverse engineering, wireless networks
• Strong understanding of common web vulnerabilities with SQLi, XSS, CSRF and exploit development
• Strong penetration testing experience
• Experience auditing code and features

As a full-time Tesla Intern, you will be eligible for:

• Aetna PPO and HSA plans > 2 medical plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans. Both have an option with a $0 payroll contribution
• Company Paid (Health Savings Account) HSA Contribution when enrolled in the High Deductible Medical Plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k), Employee Stock Purchase Plans, and other financial benefits
• Company Paid Basic Life, AD&D, and short-term disability insurance
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Commuter benefits
• Employee discounts and perks program

Pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.