Security Engineer (Internship)

• SeatGeek believes live events are powerful experiences that unite humans. With our technological savvy and fan-first attitude we’re simplifying and modernizing the ticketing industry

• SeatGeek is looking for a Security Engineering Intern to join our Security team. As an intern, you’ll gain hands-on experience across all aspects of our security program: from application security and threat modeling to detection engineering and incident response. You’ll help protect our users, systems, and data while learning how security operates at scale in a modern, cloud-native environment

• You’ll join a team focused on building proactive, secure-by-default systems through a combination of automation, visibility, and collaboration

• Whether you’re assisting in code reviews, building security tools, or supporting incident response efforts, you’ll have the opportunity to learn from experienced engineers and contribute to meaningful projects that strengthen SeatGeek’s overall security posture

• Collaborate with engineering teams to provide security guidance on new products and technologies

• Assist in threat modeling and architecture reviews for upcoming features and products

• Participate in regular security assessments through basic penetration testing and code reviews of SeatGeek products

• Learn and promote secure coding practices by working closely with developers

• Help engineer and enhance security controls to harden our AWS environment and improve visibility

• Contribute to automation and tooling projects that scale security across the company

• Support incident response efforts by helping identify vulnerabilities, tune alerts, and enhance detections

• Participate in Purple team (Red team / Blue team) exercises to understand both offensive and defensive perspectives

• Share ideas to continuously improve our security programs and shape their future

• Languages: Python, C#, Go,, SQL, and Terraform

• SCM & CI/CD: GitLab

• Infrastructure as Code: Terraform, CloudFormation

• Cloud Platform: AWS

• Central Logging and Monitoring: Datadog

• Container Orchestration: Kubernetes

• Endpoint Detection & Response: CrowdStrike

• Secrets Management: HashiCorp Vault

• Dashboarding: Datadog, Hex, and Looker

Benefits

• Benefits: We provide access to high-quality health insurance coverage, ample paid time off, and a matching 401k program.

• Parental leave: Congrats on welcoming a bundle of joy into your life! We offer 16 weeks of leave in a 12-month period.

• Subscriptions: Health and wellness are incredibly important so we cover employee subscriptions to services like One Medical, Ginger.io and Headspace.

• Team events: Regular virtual team hangs & happy hours are essential, especially while we’re all working remotely. We also put our typical day-to-day work aside for company-wide hackathons 3-4 times per year.

• Ticket perk: SeatGeek employees receive a monthly ticket-purchase stipend for live events!

• Flexible work environment: Flexible work environment, allowing you to work as many days a week in the office as you’d like or 100% remotely. A WFH stipend to support your home office setup.- (Preferred) Experience or strong interest in automating security tasks and scaling security processes through tooling

• Understanding of secure software development practices, threat modeling, and knowledge of common security vulnerabilities (like OWASP Top Ten)

• You’re graduating in spring/summer 2028

• Curiosity and a desire to learn how things work under the hood

• (Preferred) Regularly participate in CTF, bug bounty hunting, and hackathons (bonus points if you share your Bugcrowd/HackerOne/HackTheBox profiles)

• Ability to think like an attacker when securing applications, using that mindset to identify potential vulnerabilities and drive meaningful improvements in code security and defensive measures

• (Preferred) Familiarity with modern architectures, including microservices, Kubernetes, AWS, and other cloud technologies

• Proficiency in two or more programming languages (Python, C#, Go) and a solid grasp of coding and code review (yes, there’s a coding interview)

• (Preferred) Contributions to the security community (public research, blogging, presentations, etc.)