Summer Associate Internship (Penetration Tester)

The Adversarial Security Practice (ASP) team is tasked with executing penetration tests against Navy Federal applications and infrastructure. The ASP performs penetration testing leveraging a variety of manual and automated testing techniques to assess NFCU’s applications and systems for resilience against various types of attack and to identify exploitable weaknesses. Penetration testers present findings and recommendations for remediation to application and system owners and act as subject matter experts to help engineering teams understand findings and potential impact from security vulnerabilities that have been identified. Types of assessments conducted include application, network, wireless, and mobile application penetration tests.The Summer Associate Program is a 12-week internship program beginning in May 2025 and ending in August 2025. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2025 or later.The Adversarial Security Practice (ASP) Summer Associate will assist in the full lifecycle for a penetration test, including:• Pre-engagement• Information Gathering• Threat Modeling• Execution• Vulnerability Identification• Exploitation• Post-exploitation & Lateral Movement• Reporting• Drafting Penetration Test ReportThe Adversarial Security Practice (ASP) Summer Associate will also work on projects that could involve pre-engagement, testing infrastructure, remediation validation, reporting, and/or penetration testing governance. Projects will be determined based upon specific interests of the Summer Associate and needs of the ASP.