As a Security Intern at r2c, you’ll get broad experience across our security research and internal security efforts. You’ll be part of a team supporting our beloved open-source tool, Semgrep. And you will work on projects that span various security domains, including compliance, cloud, corporate, and application security.

Along the way, you will work with a dedicated group of security researchers, full-stack developers, program analysis experts, and infrastructure engineers. You will learn from senior security folk who bring experience and wisdom from decades of consulting and working in-house to secure organizations like Google, Palantir, and Salesforce. You’ll form part of a larger intern cohort joining various teams across engineering. You’ll attend lunch and learns across the company - learning about everything from the relative strengths and weaknesses of different development languages to the best ways to secure modern cloud infrastructure. Through a rotation on our internal Application Security program, you will be one of the primary internal users of Semgrep, working closely with engineering and product to improve the product and help secure our development efforts. Through a rotation with our Security Research team, you will probe deeply into specific vulnerabilities and write Semgrep rules to prevent them from occurring in our and our customers' code.

The best description of this internship comes from someone who has been where you will be. Vivek, one of our 2022 interns, wrote this blog post about their experience as an intern at r2c.

This will be the first time we have had a dedicated security intern, but we have a history of successful internships across our engineering teams. Example projects our previous interns have worked on include: