Product Security Intern

Buildertrend Solutions, Inc.; Omaha (NE); On-site; USD 32,000 - 45,000; Full time

Benefits offered by this job

Office environment with perks of a top

Free daily lunches

Summer housing at local university

Onsite fitness center

No weekend hours

Monthly intern events

Job summary

Buildertrend Solutions, Inc. is offering a Product Security Intern position in Omaha for the summer. You will work with security engineers to learn secure SDLC practices, perform SAST/DAST testing, and contribute to cloud security reviews during real projects.

You will gain hands‑on experience with OAuth flows, CI/CD integration, and vulnerability management, while using AI tools to accelerate analysis. This internship emphasizes practical skills and mentorship.

Qualifications

• Pursuing a bachelor’s or master’s degree in CS, cybersecurity, information security, math, physics, engineering, or related field.
• Available to work full‑time onsite at Buildertrend HQ in Omaha, NE, for the full summer.
• Strong interest in product security and skill growth.
• Experience with AI tools (e.g., Claude, GitHub Copilot) or a willingness to learn.
• Foundational web security knowledge (OWASP Top 10) and at least one programming language.
• Basic understanding of OAuth, SAML, JWTs, sessions and cloud security concepts (GCP/Azure)
• Familiarity with Linux/Unix CLI and networking basics.

Responsibilities

• Run and triage results from SAST/DAST scanning with guidance from senior engineers.
• Investigate and validate security findings; document confirmed vulnerabilities.
• Review authentication/authorization implementations, including OAuth 2.0 flows and RBAC.
• Perform cloud security posture reviews in GCP and Azure, analyze IAM policies.
• Contribute to secure code reviews and identify common vulnerabilities.
• Maintain security documentation, runbooks, and vulnerability tracking records.
• Assist in dependency and software composition analysis (SCA) scanning.
• Support basic penetration testing activities and security assessments.

Skills

Analytical thinking

Team collaboration

Problem solving

Communication

Education

Bachelor’s or Master’s in CS/Cybersecurity/InfoSec

Tools

SAST/DAST tools

OAuth 2.0

GCP/Azure security

Burp Suite

CI/CD security tooling

Job description

Compensation: $28 per hour Location: Omaha, NE

The job:

As a Product Security Intern, you'll spend the summer helping protect a platform construction professionals rely on every day. You'll work alongside experienced security engineers, learn how security gets built into the software development lifecycle, and get hands‑on with the same tools and workflows our Product Security team uses to keep Buildertrend's customers safe. By the end of the internship, you'll have sharpened your security skills, gained real‑world experience with application and cloud security, and contributed to work that protects the way the world builds.

What you will do:

• Assist in running and triaging results from SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) scanning tools under the guidance of senior security engineers.
• Help investigate and validate security findings, distinguishing true positives from false positives and documenting confirmed vulnerabilities.
• Support the review of authentication and authorization implementations, including OAuth 2.0 flows, token handling and role-based access controls.
• Assist with cloud security posture reviews in GCP and Azure, including IAM policy analysis, storage access controls and network configuration checks.
• Contribute to maintaining and improving security scanning pipelines integrated into CI/CD workflows.
• Participate in secure code reviews alongside security engineers, learning to identify common vulnerability patterns (injection, XSS, insecure deserialization, broken access control).
• Help maintain and update internal security documentation, runbooks and vulnerability tracking records.
• Support dependency and software composition analysis (SCA) scanning to identify known vulnerabilities in third‑party libraries.
• Assist in basic penetration testing activities and security assessments as directed.
• Participate in team meetings, incident reviews and security‑focused sprint activities.
• Work on an assigned security project with regular check‑ins and progress updates to mentors.
• Use AI‑assisted development tools, including Claude, to accelerate security analysis, research and problem‑solving while still being responsible and accountable for the quality and accuracy of your work.

Who you are and what you need:

• Currently pursuing a bachelor’s or master’s degree in computer science, cybersecurity, information security, mathematics, physics, engineering or a related field.
• Available to work full‑time onsite at the Buildertrend HQ in Omaha, NE, for the full summer.
• Strong interest in product security and a desire to grow your skills.
• Experience using AI tools (such as Claude, GitHub Copilot or similar) in coursework or personal projects, or a strong interest in learning how to use them effectively.
• Foundational understanding of web application security concepts (OWASP Top 10) and at least one programming or scripting language (e.g., Python, C#, JavaScript, Bash).
• Basic understanding of authentication and authorization concepts (OAuth, SAML, JWTs, session management), plus exposure to or interest in cloud platforms (GCP) and their security models.
• Familiarity with Linux/Unix command‑line environments and networking fundamentals (TCP/IP, DNS, HTTP).
• Interest in learning security tools and techniques, including vulnerability scanners, proxy tools (e.g., Burp Suite) and CI/CD security integrations.
• Participation in CTF competitions, security‑related clubs, or relevant coursework (computer networking, application security, operating systems or cryptography) is a plus, any level helps.
• Strong analytical and problem‑solving skills, clear written and verbal communication, and comfortable working both independently and as part of a team.
• Eager to learn, ask questions and apply feedback constructively.

We are giving you:

• Office environment with all the perks of a high-energy tech company.
• Free daily lunches at the office.
• Summer housing at a local university - you can skip the summer housing search and focus on the experience.
• Onsite fitness center to keep you feeling your best.
• No weekend hours - just work hard Monday-Friday between 8 a.m. and 5 p.m.
• Monthly events to connect other interns and Buildertrend employees.

Who we are:

Great builders don’t just manage projects – they run successful businesses. That’s where Buildertrend comes in. As the leading residential construction management platform, we give contractors the power to control their financials, schedules, team workflows and client relationships – all in one system. No more juggling disconnected tools or guessing on profitability. With nearly two decades of industry expertise, Buildertrend helps builders work smarter, scale faster and stay ahead of the competition.

Working at Buildertrend:

At Buildertrend, we fully recognize that we all work so we can live better lives - we appreciate and respect that this is a job and not your whole life. What makes Buildertrend so special is a commitment to ensuring you can have the best job, work with the best people, and live your best life outside of work. Our goal is to create a culture where everyone can make an impact on our customers, communities, and each other. In short: We want you to be who you are, love what you do, and build your best life.

Buildertrend Solutions, Inc. is committed to a policy of Equal Employment Opportunity and will not discriminate against an applicant or employee based on race, including natural or protective hairstyle, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy and pregnancy‑related conditions, childbirth, breastfeeding, sexual orientation, gender identity, gender expression, sexual orientation, reproductive decision-making), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by this application is solely to determine suitability for employment, verify identity, and maintain employment statistics on applicants. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and certain state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Buildertrend Solutions, Inc. Please inform the company's personnel representative if you need assistance completing this application or to otherwise participate in the application process.

To see the complete list of Essential Job Functions, visit https://buildertrend.com/essential-job-functions-notice/

If you want to learn more about us, check out: https://buildertrend.com/about/