Security Engineer Intern

Join Notable, a company transforming healthcare with intelligent automation. As a Security Engineer Intern, you will design, build, and automate security controls to protect our platform and data. You will collaborate closely with Security, Infrastructure, and Product Engineering teams. Your responsibilities will include building and automating security controls, creating detection and response playbooks, contributing to secure developer workflows, implementing improvements to cloud security posture, writing documentation and operational SOPs, and partnering on security reviews. Ideal candidates should have experience in security engineering, cloud, or DevSecOps, and be comfortable reading code and automating with at least one programming language.

• Contribuer à la conception, à la construction et à l'automatisation des contrôles de sécurité pour protéger la plateforme et les données.
• Collaborer avec les équipes de sécurité et d'infrastructure pour mettre en œuvre des améliorations mesurables à la posture de sécurité cloud.
• Rédiger une documentation claire et des procédures opérationnelles standard pour les systèmes que vous construisez.
• You’ve built things: coursework or projects in security engineering, cloud, or DevSecOps; comfortable reading code and automating with at least one language (Python, Go, or similar)
• You love to automate, measure outcomes, and leave systems better documented than you found them
• Familiar with common security domains such as cloud security (GCP/AWS/Azure), identity and access management, CI/CD security, container/Kubernetes basics, or detection engineering
• Strong communicator; can turn ambiguous problems into a small, shippable plan with milestones
• Exposure to healthcare, regulated environments, or privacy-centric design
• Familiarity with secure software development practices and OWASP Top 10
• Experience with log pipelines and SIEM/analytics tools; basic detection authoring
• Hands-on with infrastructure-as-code (Terraform), policy-as-code (OPA/Conftest), and CI systems (GitHub Actions, GitLab, or similar)