Security Engineer Intern

Swile; Paris; On-site; EUR 13,000 - 20,000; Full time

Job summary

Swile’s Security team is looking for a Security Engineer Intern in Paris. You will handle real alerts, run your own audits, and own projects end to end with a dedicated mentor from the team.

You will work on detection and response, audits, and fraud investigations while learning fast in a hands-on environment, with English required for collaboration across engineering teams.

Qualifications

• This is an internship; emphasis on practical thinking and learning quickly.
• You orbit security concepts with hands-on handling of alerts and audits.
• You should be comfortable collaborating across engineering teams in English.

Responsibilities

• Handle day-to-day security alerts: triage, investigate, qualify, expand as needed.
• Run targeted security audits on apps, configurations, or third-party providers; turn findings into remediation plans.
• Own ad hoc security projects across the engineering platform and assist with fraud investigations.

Skills

Python scripting

Curiosity about security

English communication

Tools

Dust platform

SIEM basics

Job description

About the role

Our Security team protects Swile’s products, data and engineering platform. We work with a simple principle: when something is recurring, we automate it, and when a security requirement can become code, we write the code.

As a Security Engineer Intern, you will not shadow the team, you will be part of it. You will handle real alerts, run your own audits and own projects end to end, with a dedicated mentor in the team throughout your internship.

What you will do

Detection and response

• Handle day to day security alerts: triage, investigate, qualify, expand when needed.
• Improve what we detect: reduce noise, close detection gaps, propose new signals.
• Automate the recurring: when an alert or a manual check keeps coming back, script it away. This is where we expect you to leave a mark.

Security audits

• Run targeted audits, from a few days to a few weeks, on applications, configurations or third party providers.
• Turn findings into a prioritised remediation plan rather than a list of tickets.

Projects you will own

• Ad hoc security projects across the engineering platform.
• Security review and hardening of the tools and integrations we rely on (Dust, third party providers, internal integrations).

Fraud

• Support fraud investigations: dig, follow the trail, understand how an abuse pattern works and how we could detect it earlier.

What we are looking for

This is an internship, so how you think matters more than what you already know.

• You learn fast and you are genuinely curious about security.
• You are a doer: you answer quickly, you close loops, you do not let things sit.
• You are pragmatic: you calibrate your response to the actual level of urgency and risk, and you know that not everything is a P1.
• You are open minded and comfortable asking questions across engineering teams.
• You are comfortable working in English, written and spoken.
• You have some scripting ability (Python or equivalent) and a basic understanding of web applications, APIs and cloud environments.

Nice to have that would make you stand out

• Personal projects, CTFs, homelab, bug bounty or security writeups.
• First exposure to a SIEM, to detection rules or to log analysis at scale.
• Curiosity for fraud and abuse patterns in a financial product.

What this internship is not

• Not a pure GRC, compliance or policy writing internship.
• Not a pentest internship.
• Not a role where you watch dashboards without changing them.

Practical details

• Location: Paris preferred.
• Duration and start date: 3-6 months internship, ASAP or from January 2027
• Mentor: a Security Engineer from the team.