Software Engineering Intern - Security

Super.com; Toronto; On-site; CAD 20,000 - 31,000; Full time

Benefits offered by this job

Home Office Setup Allowance: $300 one‑

UberEats Allowance: $25/week

Learning & Development Allowance: $?

Job summary

Super.com is offering a Software Engineer Intern position on the Security team for the Winter Term, Jan 4 – Apr 30, 2027. You’ll work remotely from Canada, contribute to securing products across the lifecycle, and gain hands-on experience with security tooling, offensive testing, and AI-assisted security workflows.

You’ll collaborate with product engineers, DevOps, and Fraud teams, receiving mentorship and real ownership.

Qualifications

• Currently pursuing a degree in CS, Cybersecurity, or related field.
• Interest in application and infrastructure security and OWASP Top 10 familiarity.
• Hands-on vulnerability finding via labs, CTFs, or coursework.
• Familiar with web tech (HTTP, REST, TLS) and networking basics.
• Solid programming fundamentals (Python preferred).
• Fast learner with strong cross-team communication.

Responsibilities

• Help add security tooling and checks to CI/CD pipelines.
• Build and improve security tooling via scripts and automation (Python).
• Use AI to support security work and automation.
• Do offensive testing to uncover vulnerabilities and create proofs of concept.
• Triages security findings and patches straightforward issues.
• Collaborate with engineers, DevOps, and Fraud teams; deliver ownership on projects.

Skills

Strong communicator

Team collaboration

Curiosity/learning mindset

Problem solving

Education

Pursuing degree in Computer Science or Cybersecurity

Tools

Python

FastAPI

Kubernetes

AWS

Job description

At Super.com, we’re on a mission to help people save more, earn more, and get more out of life. That goes for both our customers and our team.

We are more than a fast-paced, high-growth tech company; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.

At Super.com, we celebrate and reward our high performers. Follow this link to learn more about our Internship Scholarship Program and how you can further benefit from a work engagement with us. We have successfully hosted over 100 engineering internships, and always have our interns working alongside our full-time developers on core projects.

Term: This internship is for the Winter Term: January 4 - April 30, 2027

What’s it like to intern at Super.com?

Interning at Super.com is an exciting chance to dive into the world of tech and startups, work on real projects, and learn a ton along the way. From day one, interns are fully part of the team - contributing to work that actually ships and gets used. It’s a fast-moving yet super supportive environment where you’re encouraged to ask questions, try new things, and grow through hands‑on experience. Many interns say it’s the most they’ve learned in such a short time! Even though we’re remote, the culture is fun, collaborative, and well‑connected- you’ll be included in team meetings, Slack chats, and social events, so you’ll never feel like you’re doing this alone.

About this role

As a Software Engineer Intern on our Security team, you'll get hands‑on experience keeping Super.com's products secure across the software lifecycle. Your work spans offense and defense: building security tooling and proofs of concept (with AI), triaging findings from our security tools, and doing offensive testing to find issues before attackers do. You don't need to be an expert; this is a learning role where you'll build real AppSec and DevSecOps skills on a team that ships.

You’ll report to our Staff Software Engineer - Security and work closely with product engineers, DevOps, and Fraud. Expect frequent collaboration, mentorship, and a fast pace, with real ownership of the projects you take on. You'll ship meaningful security work during your internship.

What you’ll be working on:

• Help add security tooling and checks to our CI/CD pipelines

• Build and improve security tooling by writing scripts and automation (primarily Python)

• Use AI to help with day‑to‑day security work

• Do offensive testing to find vulnerabilities in our products and build proofs of concept

• Help triage security findings and patch the straightforward ones, like SCA version bumps

• Work with engineers, DevOps, and Fraud, learning how security fits into how we build and ship

Our Technology:

• Services are authored as K8s-based microservices powered by Python FastAPI backends and Typescript React front‑end code.

• Apps are built upon Postgres, Redis, Kafka, Elasticsearch, and Snowflake.

• Our infrastructure runs on AWS and leverages hosted infrastructure technologies such as EKS, MSK, Elasticache, and RDS. We use Istio for service mesh, Helm, TF and Crossplane for IAC, and Kyverno for policy‑as‑code enforcement.

• Security and application logs/metrics/events are managed through Datadog

• As an AI‑First engineering organization, we leverage modern AI development workflows using tools such as Cursor, Claude, and internally built AI agents to accelerate implementation and iteration across our codebases. You'll own and advance our AI infrastructure in this role.

What we’re looking for:

• Currently pursuing a degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)

• Genuine interest in application and infrastructure security, with some familiarity with the OWASP Top 10 and common vulnerability classes

• Some hands‑on experience finding vulnerabilities through CTFs, labs, or coursework

• Familiarity with web technologies and networking fundamentals (e.g., HTTP, REST APIs, TLS, DNS)

• Solid programming fundamentals (Python preferred)

• Comfortable in a fast‑paced environment, with curiosity and a strong willingness to learn

• Strong communicator who can work across engineering, DevOps, and other teams

Bonus Points for:

• Relevant security certifications (e.g., Security+, eJPT, PJPT, or similar)

• Previous security or software engineering internship experience

• Success in Bug Bounty programs, CTF competitions, or similar

• Interest in using AI/LLMs to support security or engineering work

• Exposure to cloud or cloud security (AWS and/or Kubernetes preferred)

• Exposure to mobile development or mobile security

• Independent projects visible on GitHub

What We Offer:

• Home Office Setup Allowance: $300 one-time

• Friday UberEats Allowance: $25/week

• Learning & Development Allowance: $300/ per term

• Fitness/Wellness Allowance: $120/per term

Candidates can be based anywhere in Canada, provided they maintain a minimum 6-hour overlap with the Eastern Time Zone and are available to work a 40-hour work week.

We’re a remote-first company, but you’re always welcome to join us at our head office on 260 Queen Street West in Toronto. We also host virtual and in-person socials where interns can connect, play games, and meet others - including company - wide game nights and events. While optional, these are great ways to build connections and make the most of your Super.com experience.
At Super.com, we are proud to leverage cutting‑edge artificial intelligence (AI) technology to make our hiring process smarter, faster, and more inclusive. By integrating AI tools into our recruitment, we enhance our ability to identify top talent efficiently while promoting fairness and consistency for every applicant.

Super.com is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Accommodations are available on request for candidates taking part in all aspects of the selection process. If needed, please notify your Talent Acquisition Partner.