Security Intern

JOB SUMMARY:

As part of the Trace3xperience Program, the Security Intern will be offered an opportunity to integrate into Trace3's AI Security practice within Security Solutions. The practice helps enterprise clients adopt and scale AI securely, including AI models, applications, agents, data, and the pipelines and platforms they run on. The Tracer will be exposed to AI security assessment, strategy, architecture, and design engagements with a client base anchored in the Fortune 1000 space.

This internship is designed as a path into the Trace3 Service Delivery Organization. The objective is for the Tracer to become delivery-ready, meaning able to contribute to a client engagement under the supervision of more senior delivery consultants, by the end of the program. Internships typically run through the summer term and are frequently extended to three to four months, at which point Tracers who are delivery-ready are staffed on AI Security engagements within the Service Delivery Organization. 

Tracers in this program will receive accelerated professional development, exposure to all technical functions of an IT consulting organization, world-class mentoring, and unique networking opportunities across the organization.

WHAT YOU CAN EXPECT TO LEARN:

You can expect to learn, at an appropriate level, the same body of work our AI Security consultants practice every day. Under the guidance of senior consultants and the Security leadership team, you will progress from structured learning and lab work, to shadowing and contributing on pre sales and delivery engagements, to owning defined work products yourself. Along the way you will learn:

• How enterprise AI programs are built and where they break: the architecture of AI models, applications, agents, data, and the pipelines and platforms they run on, and how security applies at each layer.
• Trace3's AI security assessment methodology, from discovery and evidence collection through control mapping, findings development, and executive readout, by supporting live client engagements under consultant supervision.
• Hands-on experience in Trace3 and vendor labs with the technologies that operationalize AI security, including AI security posture management, LLM gateways and guardrails, AI runtime protection, agent identity and authorization, model registries and AI supply chain controls, and AI-aware data security.
• How to apply AI security and Trustworthy AI frameworks and standards, including NIST AI RMF, ISO 42001, OWASP Top 10 for LLM and Agentic Applications, MITRE ATLAS, and CSA AI controls, and how they connect to foundational cybersecurity frameworks such as NIST CSF, ISO 27001, and MITRE ATT&CK.
• The AI platforms and native AI security capabilities of the major cloud service providers (AWS, Azure, GCP), and how clients actually deploy AI on them.
• Emerging AI security problems, including trustworthy agents, agent-to-agent trust and delegation, non-human identity, and AI resilience, by contributing research and analysis to Trace3's point of view and solution plays.
• How to translate technical AI security findings into business language for CISO-, CIO-, and executive-level audiences, and how to produce clear, well-structured client deliverables, documentation, and presentations.
• How a technology consulting business works, including engagement scoping, statements of work, the handoff from Sales to Solutions to Delivery, and how Trace3 works with its OEM and technology partners.

Trace3 provides a dynamic learning environment and hands-on experience in developing and implementing strategies, programs, and technical solutions. We empower our customers to move from Trustworthy AI principles to practices, fulfilling on our commitment to propel our clients up the innovation curve and delivering on our belief that “All Possibilities Live In Technology.”

ELIGIBILITY AND PREFERRED SKILLS:

Eligibility and required skills

• Enrollment in the Junior or Senior year of an undergraduate program, or in a Master's program, at an accredited college or university, in computer science, cybersecurity, information security, software engineering, data science, artificial intelligence / machine learning, or a closely related technical discipline. Graduate students in AI or security programs are strongly encouraged to apply.
• Cumulative grade point average (GPA) of 3.0 or better; People and Organizational Health may require a copy of the applicant's transcript.
• Foundational understanding of cybersecurity principles, including identity and access management, network, cloud, and application security, gained through coursework, labs, certifications, or projects.
• Foundational understanding of how machine learning and large language models work, including training and inference, prompting, embeddings and retrieval, and agents and tool use, gained through coursework or projects.
• Working proficiency in Python and comfort with scripting, APIs, and the command line.
• Ability to work independently on assigned tasks and accept direction on given assignments.
• Self-motivated individual with a customer mindset and desire to help people.
• Enthusiasm for technical problem solving with attention to detail and strong written and verbal communication skills.
• Ability to learn and research in a dynamic and engaging environment.
• Availability to work 40 hours per week throughout the internship; availability to extend beyond the summer term is preferred.

Preferred skills and experience

• Hands-on exposure to at least one major cloud service provider (AWS, Azure, GCP) and its AI services.
• Experience building or securing an LLM application or AI agent through a class project, hackathon, personal project, research, or open-source contribution.
• Familiarity with one or more of NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or NIST CSF.
• Entry-level certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or a cloud fundamentals certification from AWS, Azure, or GCP.
• Participation in capture-the-flag competitions, security or AI clubs, AI red-teaming exercises, or academic research in security or AI.
• Prior academic, professional, or internship experience in a technical or consulting setting.