Summer Associate Internship (Penetration Testing)

Summer Associates within the Adversarial Security Practice (ASP) may work on a variety of projects that strengthen Navy Federal’s offensive security, detection, and resilience capabilities. 

Potential projects include:

• Researching and developing new penetration testing methodologies
• Evaluating AI-powered security testing and attack simulation tools; creating threat-informed purple team, red team, or adversary emulation frameworks
• Developing security testing automation and reporting solutions; enhancing governance, procedures, and playbooks for penetration testing and remediation validation
• Performing research on emerging threats, vulnerabilities, and attack techniques; supporting documentation and process improvements across the Secure Innovation & Resiliency (SIR) organization
• Designing strategic cybersecurity capabilities that improve collaboration between offensive and defensive security teams.

The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.  

• Support application, infrastructure, cloud, wireless, and API penetration testing activities, including information gathering, security testing, vulnerability analysis, and documentation.
• Assist with researching emerging cyber threats, attack techniques, vulnerabilities, and industry security trends to enhance the organization's security testing capabilities.
• Participate in remediation validation efforts to verify that identified security findings have been effectively addressed.
• Support the development and maintenance of penetration testing procedures, playbooks, governance documentation, and operational processes.
• Assist with the creation of reports, presentations, and other deliverables that communicate security findings, recommendations, and program objectives to technical and business audiences.
• Collaborate with cybersecurity, technology, and business teams to understand system architectures, security controls, and organizational processes.
• Evaluate and recommend improvements to security testing methodologies, offensive security capabilities, and assessment processes.
• Contribute to strategic cybersecurity initiatives designed to improve the organization's ability to identify, detect, and respond to cyber threats.
• Develop recommendations based on research, testing results, industry best practices, and empirical evidence.
• Support security automation, process improvement, and capability development efforts across the Adversarial Security Practice.
• Participate in team meetings, knowledge-sharing sessions, and cross-functional collaboration opportunities to gain exposure to a broad range of cybersecurity disciplines.
• Complete an independent capstone project that delivers lasting value through security research, process improvement, capability development, or strategic recommendations.

• Must be pursuing a Bachelor's or Master's degree from an accredited college or university in Cybersecurity, Computer Science, Information Technology, Information Systems, Computer Engineering, or a related field.
• Demonstrated interest in cybersecurity, ethical hacking, penetration testing, security engineering, or information assurance, such as participation in Capture the Flag (CTF) events, Hack The Box, VulnHub, collegiate cyber defense or CTF teams, security clubs, local cybersecurity meetups, security conferences, personal lab environments, vulnerability research, or similar hands-on learning activities.
• Basic understanding of networking concepts, operating systems, web applications, and common security principles.
• Familiarity with common cybersecurity threats, vulnerabilities, attack techniques, and defensive controls.

Desired Qualifications 

• Strong analytical and problem-solving skills with the ability to research complex topics and develop practical recommendations.
• Effective verbal and written communication skills, including the ability to clearly present technical concepts to diverse audiences.
• Ability to work independently while collaborating effectively within a team environment.
• Demonstrated curiosity, initiative, and a willingness to learn new technologies and cybersecurity concepts.

Additional Information 

Hours:

• Monday – Friday, 8:00 AM – 4:30 PM 
   

Location:

• 5510 Heritage Oaks Dr, Pensacola, FL, 3252  or Remote 

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE 100 Best Companies to Work For® 2025
• Yello and WayUp Top 100 Internship Programs
• Computerworld® Best Places to Work in IT
• Newsweek Most Loved Workplaces
• 2025 PEOPLE® Companies That Care
• Newsweek Most Trustworthy Companies in America
• Military Times 2025 Best for Vets Employers
• Best Companies for Latinos to Work for 2025
• Forbes® 2025 America’s Best Large Employers
• Forbes® 2025 America's Best Employers for New Grads
• Forbes® 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence 
• Military.com Top Military Spouse Employers 2025 
• 2025 Handshake Early Talent Award

From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [email protected] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.

Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.