Security Engineer Intern

Lucid Software is the leader in visual collaboration, helping teams see and build the future from idea to reality. We hold true to our core values: innovation in everything we do, passion & excellence in every area, individual empowerment, initiative and ownership, and teamwork over ego. At Lucid, we value diversity and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. Lucid is a hybrid workplace. We promote a healthy work-life balance by allowing employees to work remotely, from one of our offices, or a combination of the two depending on the needs of the role and team.

Since the company’s founding, Lucid Software has received numerous global and regional recognitions for its products, business, and workplace culture. These include being listed to the Forbes Cloud 100, Fortune Best Workplaces in Technology, and the PEOPLE Companies that Care list all for multiple consecutive years. Top businesses use our products all around the world, including customers such as Google, GE, and NBC Universal. Our partners include industry leaders such as Google, Atlassian, and Microsoft.  

As a Security Engineer Intern at Lucid, you will protect Lucid’s corporate assets, including our world-class web applications and employees. Lucid Software’s security team fosters an environment where business and development can quickly adapt and innovate. We stay abreast of evolving legal and business requirements through a risk and compliance mindset. Our mission is to protect and support the objectives of the business.

Lucid’s customers trust us to keep their data secure. This trust is critical to our mission to help teams see and build the future. A successful Security Engineer Intern at Lucid will be passionate about safeguarding customer and corporate data by proactively identifying and proposing solutions to remediate risks.

This is a full-time summer internship with a 12-week duration.

Responsibilities:

• Design, implement, and maintain security controls for Lucid's information systems.
• Assist with third-party and in-house pentesting efforts on Lucid’s products.
• Assist with incident response, including identifying, mitigating, resolving, and document incidents.
• Improve security automation.
• Proactively identify threats and opportunities for improvements in security controls and processes across the business.
• Design solutions to mitigate risk and support business objectives.
• Promote and exemplify Lucid’s core values.

Requirements:

• Passion for security
• Pursuing Bachelor’s degree (or similar) in a technical security-adjacent field (e.g. Computer Science, Software Engineering, Information Security)
• Understanding of web applications and related security controls
• Adversarial mindset: and enjoys breaking, testing, and improving security controls by challenging assumptions and identifying gaps others may overlook
• Proficiency in one or more programming languages (e.g. Java, JavaScript, Python)
• Proficiency in one or more scripting languages (e.g. Bash, Powershell, Python)
• Able to work independently and make progress without steady supervision
• Excellent verbal and written skills with great attention to detail
• Ability and willingness to learn new skills quickly

Preferred Qualifications:

• Security-relevant side projects (e.g. HackTheBox, home labs)
• Experience or familiarity with pentesting
• Participation in the security community (e.g. security conferences, research)
• General knowledge of and skill in applying risk management principles and practices
• Security-related certification(s) (e.g., Security )
• Understanding of common forensics techniques and methodologies along with their prerequisite logging and alerting.
• Experience with bug bounty programs and/or vulnerability disclosure
• Understanding of common AWS infrastructure components (e.g. Lambda, S3, DynamoDB)

#LI-NJ1