Want to know if this job is worth applying to?
San Francisco, California, United States
Onsite
Rebuild how the world works, to make institutions work better for the people they serve.
Brain Co. builds AI-native operating systems for large, regulated institutions. Each system is built for a specific industry, powered by agents that push real workflows forward. Underneath it all is Atlas, our proprietary platform that keeps customers in control, secure by design, and never locked into one model.
Brain Co. is entering its next phase of production deployments on a national scale with an elite team built from Palantir, Google, Meta, and Nvidia, and a growing footprint across government, insurance, health, and financial services.
Joining now means shaping both the company and a new category of applied AI. Every project here ships to production and is expected to create measurable customer value and impact.
You'll work alongside exceptional peers on some of the hardest problems in applied AI. It’s the kind of work you'll still be proud of in ten years from now.
As a Platform Security Engineer Co-Op Intern, you’ll work alongside experienced security, platform, and infrastructure engineers to help build security directly into how Brain Co. develops and ships software.
This co-op is designed for current undergraduate students, specifically juniors or seniors, who want hands-on experience securing real production systems. You’ll contribute to projects across CI/CD, cloud infrastructure, Kubernetes, containers, and Infrastructure-as-Code while receiving mentorship through code reviews, design discussions, and hands-on collaboration with the team.
This is a builder-focused security role. You’ll learn how security tooling and automated guardrails can make the secure path the easy path for engineers.
Help build and improve security controls in CI/CD pipelines, including static analysis, secrets scanning, dependency checks, and automated policy enforcement.
Contribute to developer-facing security tooling, such as linting rules, reusable workflows, automation, and guardrails.
Help secure Kubernetes and containerized workloads, including access controls, image security, workload configuration, and deployment policies.
Contribute to security baselines in Terraform and Infrastructure-as-Code, including IAM, networking, encryption, and secure defaults.
Work with cloud infrastructure across AWS, GCP, or Azure to identify misconfigurations and improve security visibility.
Help automate the detection and remediation of common security issues.
Participate in threat modeling, code reviews, and architecture discussions alongside experienced security and platform engineers.
Work with engineers to understand security findings and turn them into practical, actionable fixes.
Help improve documentation and tooling so security controls are easy for developers to understand and adopt.
Are a current undergraduate student, specifically a junior or senior, pursuing a degree in Computer Science, Engineering, Cybersecurity, or a related technical field.
Have strong software engineering fundamentals through coursework, internships, research, or personal projects.
Have experience programming in Python, Go, Java, C++, Bash, or a similar language.
Have exposure to or a strong interest in application security, platform security, cloud security, or infrastructure security.
Are familiar with or excited to learn technologies such as Kubernetes, Docker, Terraform, GitHub Actions, and AWS/GCP/Azure.
Have an interest in how software moves from code to production, including CI/CD, containers, cloud infrastructure, and deployment workflows.
Enjoy thinking about how systems can fail, where trust boundaries exist, and how security controls can prevent problems without slowing engineers down.
Are curious, proactive, and excited to learn quickly in a fast-paced engineering environment.
Enjoy taking ownership of technical problems while learning from experienced engineers.
Coursework, projects, or internship experience involving cloud security, Kubernetes, or Infrastructure-as-Code.
Familiarity with security tooling such as OPA, Conftest, Kyverno, Trivy, Semgrep, or similar tools.
Experience with secrets management, IAM, or authentication and authorization systems.
Interest in software supply chain security, including dependency security, image signing, SBOMs, or secure build pipelines.
Experience building developer tools or automation.
Hands-on experience building security tooling for production AI systems.
Practical exposure to CI/CD security, Kubernetes, cloud infrastructure, containers, and Infrastructure-as-Code.
Experience designing security controls that fit directly into real engineering workflows.
Direct mentorship from experienced security, platform, and infrastructure engineers.
Exposure to threat modeling, secure architecture, and software supply chain security.
Ownership over meaningful engineering projects that can ship into production.
Winter / Spring Co-Op: January 11, 2027 – April 30, 2027
Competitive co-op compensation.
Hands-on mentorship from experienced security and infrastructure engineers.
Opportunity to work on real production systems used globally.
Potential return-offer consideration for future internships or full-time roles.
Daily lunches if onsite.
Help secure AI systems deployed across governments, healthcare, and other critical industries.
Work on security as an engineering problem, not just a policy or compliance exercise.
Learn directly from engineers and leaders from Tesla, DeepMind, Databricks, and other top engineering organizations.
Build practical experience with the security foundations behind modern production AI systems.
Take ownership early and grow quickly through hands-on engineering.
Thrive in a culture built on speed, curiosity, and impact.
If you’re a current junior or senior who wants to build security into real systems rather than only study vulnerabilities in isolation, Brain Co. is a place to learn, build, and make an impact.
.png?1779472985){kind=avatar}