A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
Summer Associates within the Adversarial Security Practice (ASP) may work on a variety of projects that strengthen Navy Federal's offensive security, detection, and resilience capabilities.
Potential projects include:
Researching and developing new penetration testing methodologies Evaluating AI-powered security testing and attack simulation tools; creating threat-informed purple team, red team, or adversary emulation frameworks Developing security testing automation and reporting solutions; enhancing governance, procedures, and playbooks for penetration testing and remediation validation Performing research on emerging threats, vulnerabilities, and attack techniques; supporting documentation and process improvements across the Secure Innovation & Resiliency (SIR) organization Designing strategic cybersecurity capabilities that improve collaboration between offensive and defensive security teams. The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later. Must be pursuing a Bachelor's or Master's degree from an accredited college or university in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related field. Demonstrated interest in cybersecurity, ethical hacking, penetration testing, security engineering, or information assurance, such as participation in Capture the Flag (CTF) events, Hack The Box, VulnHub, collegiate cyber defense or CTF teams, security clubs, local cybersecurity meetups, security conferences, personal lab environments, vulnerability research, or similar hands-on learning activities. Basic understanding of networking concepts, operating systems, web applications, and common security principles. Familiarity with common cybersecurity threats, vulnerabilities, attack techniques, and defensive controls. Desired Qualifications Strong analytical and problem-solving skills with the ability to research complex topics and develop practical recommendations. Effective verbal and written communication skills, including the ability to clearly present technical concepts to diverse audiences. Ability to work independently while collaborating effectively within a team environment. Demonstrated curiosity, initiative, and a willingness to learn new technologies and cybersecurity concepts.
Additional Information Hours:
Monday - Friday, 8:00 AM - 4:30
PM Location:
5510 Heritage Oaks Dr, Pensacola, FL, 3252 or Remote Support application, infrastructure, cloud, wireless, and API penetration testing activities, including information gathering, security testing, vulnerability analysis, and documentation. Assist with researching emerging cyber threats, attack techniques, vulnerabilities, and industry security trends to enhance the organization's security testing capabilities. Participate in remediation validation efforts to verify that identified security findings have been effectively addressed. Support the development and maintenance of penetration testing procedures, playbooks, governance documentation, and operational processes. Assist with the creation of reports, presentations, and other deliverables that communicate security findings, recommendations, and program objectives to technical and business audiences. Collaborate with cybersecurity, technology, and business teams to understand system architectures, security controls, and organizational processes. Evaluate and recommend improvements to security testing methodologies, offensive security capabilities, and assessment processes. Contribute to strategic cybersecurity initiatives designed to improve the organization's ability to identify, detect, and respond to cyber threats. Develop recommendations based on research, testing results, industry best practices, and empirical evidence. Support security automation, process improvement, and capability development efforts across the Adversarial Security Practice. Participate in team meetings, knowledge-sharing sessions, and cross-functional collaboration opportunities to gain exposure to a broad range of cybersecurity disciplines. Complete an independent capstone project that delivers lasting value through security research, process improvement, capability development, or strategic recommendations.
