This role is located in the Seattle or San Francisco hub. You must be able to work from one of these hubs to qualify.

This position is not eligible for F1 and J1 students. It is not available for any work sponsorship.

Your Future Team

As an intern in our Security team, you'll watch over our Atlassian services which host tens of thousands of customers. You'll report to a Security Engineering Manager, and learn from your team mentor who are some of the best Security Engineers in the business.

You’ll own a scoped project addressing a real, well-researched security problem. With direct guidance from a senior engineer, you’ll explore approaches, shape the solution, and build something designed for real use by the team. Projects could include automated security testing, investigation tools, or systems that help us identify and prioritize risks.

Responsibilities

• Own a scoped security engineering project, from understanding the problem and exploring approaches to building, testing, and documenting the solution, with guidance from a senior engineer.

• Develop tools and automation that help engineers find security weaknesses, investigate findings, or prioritize risks.

• Conduct security research and analyze results to understand potential weaknesses and distinguish actionable findings from false positives.

• Use AI-assisted coding and research tools while validating their outputs. Depending on the project, build AI-assisted security capabilities or investigate risks in AI-enabled systems.

• Collaborate with security and software engineers through design discussions, code reviews, and regular feedback.

• Demonstrate your solution, explain its results and limitations, and prepare it for others to use and maintain.

Compensation

At Atlassian, we strive to design equitable and explainable compensation programs. To support this goal, the baseline of our range is higher than that of the typical market range, but in turn we expect to hire most candidates near this baseline. Base pay within the range is ultimately determined by a candidate's skills, expertise, or experience.

In the United States, we have three geographic pay zones. For this role, our current base pay ranges for new hires in each zone are:

Zone A: $56/hr - $64/hr

Zone B: $51/hr - $58/hr

Zone C: $47/hr - $54/hr

This role may also be eligible for benefits, bonuses, commissions, and equity.

Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.

Minimum Qualifications

• Able to commit to a 12-week full-time (40hrs/week) program during Summer 2027.

• Currently enrolled full-time in a bachelors or masters degree program and returning to the program after the completion of the internship, graduating by August 2028.

• Strong programming skills, including the ability to write, debug, and test code.

• Basic understanding of how web applications and systems work, along with foundational security concepts.

• Familiarity with AI and large language models, including hands-on experience through coursework, personal projects, research, or previous work.

• Ability to investigate a problem, evaluate information, and communicate findings clearly.

• Demonstrated interest in security through coursework, personal projects, capture-the-flag challenges, research, or previous experience.

Preferred Qualifications

Security tools: Using tools such as Burp Suite, OWASP ZAP, Semgrep, or Snyk to identify and investigate security weaknesses.

• Engineering and automation: Building scripts or tools in Python, JavaScript/TypeScript, Go, or another language, with exposure to Git, APIs, and automated testing.

• AI-assisted development: Building projects using LLM APIs or coding assistants, with examples of how you tested and validated the results.

• Practical security learning: Participation in CTFs, security research, open-source contributions, or labs such as PortSwigger Web Security Academy, picoCTF, or Hack The Box.

• Foundational certifications: CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or equivalent knowledge demonstrated through coursework and hands-on projects.

• Optional work samples: If you have a publicly shareable bug report, security write-up, or CTF walkthrough, please include a link with your application. We’d love to see how you investigated the problem, validated your findings, and explained the impact. Please do not share confidential information or undisclosed vulnerabilities.