Skip to content

Open nowPosted 7 days ago

Summer 2027 Internship - Information Security Engineer

General Matter129 open roles

Pay
$32 – $46 an hour
Where
Los Angeles, CA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSummer 2027 Internship - Information Security EngineerGeneral Matter · Los Angeles, CA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on General Matter's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market. General Matter postings stay open a median of 17 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 7 days ago

General Matter median: 17 days open

The posting

About the company

General Matter enriches uranium.

We are designing, building, and operating the world’s lowest-cost enrichment services, here in the US.

In the process, we are restoring America’s ability to produce nuclear fuel to power AI, advanced manufacturing and critical industries our country relies on to remain competitive.

Fuel drives the cost of advanced reactor electricity production, and enrichment drives the cost of the fuel that advanced reactors consume. Reliable, low-cost enrichment is the catalyst for the nuclear Renaissance now under way.

Our mission is to make nuclear not only the cleanest and safest source of baseload power, but also the most affordable. We believe abundant nuclear energy will lead to a post-scarcity society.

We were incubated inside Founders Fund, like Anduril and Palantir before us, and are backed by over a dozen of the world's top venture capital firms.

Our lean, world-class team of engineers and operators is applying a first-principles approach to solving the problem of nuclear fuel production.

We are a mission-driven company with a culture of urgency, accountability, and transparency.

Help us build a high-energy society by making the cleanest, safest form of baseload energy the most affordable.

About This Role

General Matter builds its own technology: the software, firmware, control systems, and infrastructure that run an industrial nuclear fuel facility. At most companies, a security bug costs you data. Here, the software we build, and any security vulnerabilities we miss, touch the real world. The Security team's job is to find those gaps before anyone else does. We do that through offensive testing, code audits, design reviews, and hardening the systems we ship.

As an intern on the team, you'll attack General Matter's products and infrastructure, while working with the engineers who own them to fix what you find. Targets include web apps, APIs, Linux and Windows hosts, cloud environments, embedded devices, and industrial controllers. You'll own real projects from start to finish, and you won't be writing policy documents

Responsibilities

  • Break everything you touch, then help us fix it.
  • Run penetration tests against General Matter networks, services, web applications, and APIs. Prove what you find with working proof-of-concept exploits.
  • Audit source code and features for security vulnerabilities in languages like Python, C, C++, Rust, Go, and TypeScript. Then build static analysis rules or CI checks so the same class of bug can't come back.
  • Reverse engineer and attack embedded devices and industrial equipment on an isolated test bench. That includes firmware extraction, binary analysis on x86 and ARM, debug interfaces (JTAG, SWD, UART), and PLC and industrial protocol implementations (Modbus, EtherNet/IP, OPC UA).
  • Do threat modeling and adversarial design reviews with software, controls, and hardware engineers. Help design a secure architecture for systems before they ship.
  • Assess third-party software, devices, and services before they get into our environment, and work with vendors and suppliers to get the issues fixed.
  • Attack cloud and identity infrastructure, including IAM misconfigurations, exposed secrets, privilege escalation paths, and CI/CD supply chain weaknesses.
  • Build automated tooling that spots known security exposures and keeps running after your internship ends.
  • Present your findings and fixes to the engineers and leaders who own the systems.

Basic Qualifications

  • Currently pursuing a Bachelor's, Master's, or PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field
  • Security experience in one or more of the following: C, C++, Rust, Go, Python, x86, ARM, cryptography, reverse engineering, embedded systems, or network protocols.
  • A strong understanding of common vulnerability classes and how to exploit them, such as SQLi, XSS, CSRF, SSRF, memory corruption, and authentication or authorization flaws.
  • Experience auditing code and features, and comfort reading large codebases you didn't write.
  • Strong investigative and analytical problem-solving skills. You keep digging after the obvious attacks fail.
  • Clear written communication. A finding only counts if the engineer who owns the system understands it and can fix it.

Preferred Skills and Experience

  • Hands-on offensive security experience. CTF competitions are ideal, and bug bounties, CVEs, security research, or homelab projects also count.
  • Experience with fuzzing (AFL++, libFuzzer), static analysis (Semgrep, CodeQL), and sandboxing or exploit mitigations.
  • Experience with tools like Burp Suite, Ghidra, IDA, Binary Ninja, Wireshark, or Metasploit.
  • Hardware hacking experience, such as firmware dumps, UART/JTAG/SWD, logic analyzers, or fault injection basics.
  • Experience with industrial control systems, PLCs, SCADA, or OT protocols. This is a plus but not required, and we'll teach you.
  • Experience attacking Windows/Active Directory, Linux, cloud (AWS, Azure, GCP), containers, or Kubernetes.
  • A GitHub, blog, CTF writeup, CVE, or bug bounty profile that shows us something you've broken.

Additional Requirements

  • Willing and able to work on-site in Los Angeles, CA, full-time (40 hours/week), for the whole internship.
  • All testing is done on General Matter-owned systems, within an approved scope and rules of engagement.
  • This position may require extended hours, and interns are eligible for overtime pay.

Equal Opportunity Employer

General Matter is an Equal Opportunity Employer; employment with General Matter is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Compensation and Benefits

The hourly pay range for this internship is $32–$46 per hour, depending on the candidate's current standing in school (i.e. sophomore, senior).

Interns will receive a monthly housing stipend, and are eligible for overtime pay. Please note that the stated hourly range is an estimate and may be adjusted based on market conditions, business needs, or other factors.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against General Matter's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on General Matter's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    General Matter's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.