Software Engineering Intern - Security

About the opportunity

At Super.com, we’re on a mission to help people save more, earn more, and get more out of life. That goes for both our customers and our team.We are more than a fast-paced, high-growth tech company; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.At Super.com, we celebrate and reward our high performers. Follow this link to learn more about our Internship Scholarship Program and how you can further benefit from a work engagement with us. We have successfully hosted over 100 engineering internships, and always have our interns working alongside our full-time developers on core projects. Term: This internship is for the Winter Term: January 4 - April 30, 2027What’s it like to intern at Super.com?Interning at Super.com is an exciting chance to dive into the world of tech and startups, work on real projects, and learn a ton along the way. From day one, interns are fully part of the team - contributing to work that actually ships and gets used. It’s a fast-moving yet super supportive environment where you’re encouraged to ask questions, try new things, and grow through hands-on experience. Many interns say it’s the most they’ve learned in such a short time! Even though we’re remote, the culture is fun, collaborative, and well-connected- you’ll be included in team meetings, Slack chats, and social events, so you’ll never feel like you’re doing this alone.About this roleAs a Software Engineer Intern on our Security team, you'll get hands-on experience keeping Super.com's products secure across the software lifecycle. Your work spans offense and defense: building security tooling and proofs of concept (with AI), triaging findings from our security tools, and doing offensive testing to find issues before attackers do. You don't need to be an expert; this is a learning role where you'll build real AppSec and DevSecOps skills on a team that ships.You'll report to our Staff Software Engineer - Security and work closely with product engineers, DevOps, and Fraud. Expect frequent collaboration, mentorship, and a fast pace, with real ownership of the projects you take on. You'll ship meaningful security work during your internship.What you’ll be working on:Help add security tooling and checks to our CI/CD pipelinesBuild and improve security tooling by writing scripts and automation (primarily Python)Use AI to help with day-to-day security workDo offensive testing to find vulnerabilities in our products and build proofs of conceptHelp triage security findings and patch the straightforward ones, like SCA version bumpsWork with engineers, DevOps, and Fraud, learning how security fits into how we build and shipOur Technology:Services are authored as K8s-based microservices powered by Python FastAPI backends and Typescript React front-end code.Apps are built upon Postgres, Redis, Kafka, Elasticsearch, and Snowflake.Our infrastructure runs on AWS and leverages hosted infrastructure technologies such as EKS, MSK, Elasticache, and RDS. We use Istio for service mesh, Helm, TF and Crossplane for IAC, and Kyverno for policy-as-code enforcement.Security and application logs/metrics/events are managed through DatadogAs an AI-First engineering organization, we leverage modern AI development workflows using tools such as Cursor, Claude, and internally built AI agents to accelerate implementation and iteration across our codebases. You'll own and advance our AI infrastructure in this role.What we’re looking for:Currently pursuing a degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)Genuine interest in application and infrastructure security, with some familiarity with the OWASP Top 10 and common vulnerability classesSome hands-on experience finding vulnerabilities through CTFs, labs, or courseworkFamiliarity with web technologies and networking fundamentals (e.g., HTTP, REST APIs, TLS, DNS)Solid programming fundamentals (Python preferred)Comfortable in a fast-paced environment, with curiosity and a strong willingness to learnStrong communicator who can work across engineering, DevOps, and other teamsBonus Points for:Relevant security certifications (e.g., Security+, eJPT, PJPT, or similar)Previous security or software engineering internship experienceSuccess in Bug Bounty programs, CTF competitions, or similarInterest in using AI/LLMs to support security or engineering workExposure to cloud or cloud security (AWS and/or Kubernetes preferred)Exposure to mobile development or mobile securityIndependent projects visible on GitHubWhat We Offer:Home Office Setup Allowance: $300 one-timeFriday UberEats Allowance: $25/weekLearning & Development Allowance: $300/ per termFitness/Wellness Allowance: $120/per termCandidates can be based anywhere in Canada, provided they maintain a minimum 6-hour overlap with the Eastern Time Zone and are available to work a 40-hour work week.We’re a remote-first company, but you’re always welcome to join us at our head office on 260 Queen Street West in Toronto. We also host virtual and in-person socials where interns can connect, play games, and meet others - including company - wide game nights and events. While optional, these are great ways to build connections and make the most of your Super.com experience. At Super.com, we are proud to leverage cutting-edge artificial intelligence (AI) technology to make our hiring process smarter, faster, and more inclusive. By integrating AI tools into our recruitment, we enhance our ability to identify top talent efficiently while promoting fairness and consistency for every applicant.Super.com is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.Accommodations are available on request for candidates taking part in all aspects of the selection process. If needed, please notify your Talent Acquisition Partner.