Cybersecurity Engineering Intern: Build Security AI Tools

Shopee; Singapore; Vor Ort; SGD 12.000 - 19.000; Vollzeit

Zusammenfassung

Shopee is seeking a security-focused intern to perform security assessments on web apps, APIs, and internal systems. You will review code and architectures to prevent flaws, and help embed security into new initiatives.

You will also help build automation for security workflows, including AI agents, SAST, DAST, and SCA integrations. Strong knowledge of OWASP Top 10, networking fundamentals, and at least one language (Go/Java/Python/JavaScript) is preferred.

Qualifikationen

• Currently pursuing a Bachelor's degree or higher in Computer Science, Information Security, Cyberspace Security or a related field preferred.

Aufgaben

• Perform security assessments and penetration testing on Shopee's web applications, APIs and internal systems; find real, exploitable issues and drive them to closure with engineering teams.
• Review code and architecture designs to catch security flaws before they ship, and help embed security requirements into new business and technology initiatives.
• Build and improve the security automation and tooling that scales the team's coverage beyond manual review: in-house AI agents for security workflows, as well as SAST, DAST and SCA capabilities integrated into the development pipeline.
• Assess the security of AI-powered features and internal AI tooling — prompt injection, unsafe tool/agent invocation, data leakage and over-permissive integrations.
• Support vulnerability response and incident investigation; track industry trends and bring what you learn back into our defences.

Kenntnisse

Networking fundamentals

OWASP Top 10

Go

Java

Python

JavaScript

Security communication

AI/LLM security awareness

Fast learner

Ausbildung

Bachelor's degree or higher in CS/InfoSec/Cybersecurity

Tools

SAST

DAST

SCA

Semgrep

CodeQL

Burp Suite

Jobbeschreibung

Shopee is seeking a security-focused intern to perform security assessments on web apps, APIs, and internal systems. You will review code and architectures to prevent flaws, and help embed security into new initiatives.

You will also help build automation for security workflows, including AI agents, SAST, DAST, and SCA integrations. Strong knowledge of OWASP Top 10, networking fundamentals, and at least one language (Go/Java/Python/JavaScript) is preferred.