"Alerted.org

Overview

The Adversarial Security Practice (ASP) team is tasked with executing penetration tests against Navy Federal applications and infrastructure. The ASP performs penetration testing leveraging a variety of manual and automated testing techniques to assess NFCU’s applications and systems for resilience against various types of attack and to identify exploitable weaknesses. Penetration testers present findings and recommendations for remediation to application and system owners and act as subject matter experts to help engineering teams understand findings and potential impact from security vulnerabilities that have been identified. Types of assessments conducted include application, network, wireless, and mobile application penetration tests.

The Adversarial Security Practice (ASP) Summer Associate will assist in the full lifecycle for a penetration test, including:

+ Pre-engagement

+ Information Gathering

+ Threat Modeling

+ Execution

+ Vulnerability Identification

+ Exploitation

+ Post-exploitation & Lateral Movement

+ Reporting

+ Drafting Penetration Test Report

The Adversarial Security Practice (ASP) Summer Associate will also work on projects that could involve pre-engagement, testing infrastructure, remediation validation, reporting, and/or penetration testing governance. Projects will be determined based upon specific interests of the Summer Associate and needs of the ASP.

The Summer Associate Program is a 12-week internship program beginning in May 2026 and ending in August 2026. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2026 or later.

Responsibilities

+ Perform application, network, wireless, and/or mobile application penetration tests

+ Complete projects related to building, managing, and running a penetration testing program

Qualifications

+ Knowledge of MITRE ATT&CK and/or CAPEC Frameworks

+ Experience testing against or working with Active Directory environments

+ Experience using both Linux based and Windows based systems

+ Experience coding in languages and on frameworks such as: Rust, Go, Python, JavaScript, Bash, PowerShell, Java, C#, C++, Springboot, React, NodeJS

+ Networking knowledge spanning: IPv4/6, DNS, TCP/UDP, TLS/SSL, SSH, HTTP, Proxies

+ Knowledge of modern cryptographic hashing & encryption methods and best practices

+ Communication, presentation, and analytical skills

Hours: Monday – Friday 8:00AM - 4:30PM

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• Best Companies for Latinos to Work for 2024

• Computerworld® Best Places to Work in IT

• Forbes® 2025 America's Best Large Employers

• Forbes® 2024 America's Best Employers for New Grads

• Forbes® 2024 America's Best Employers for Tech Workers

• Fortune Best Workplaces for Millennials™ 2024

• Fortune Best Workplaces for Women ™ 2024

• Fortune 100 Best Companies to Work For® 2025

• Military Times 2024 Best for Vets Employers

• Newsweek Most Loved Workplaces

• 2024 PEOPLE® Companies That Care

• Ripplematch Recruiting Choice Award

• Yello and WayUp Top 100 Internship Programs

From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected Veteran.

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

REQNUMBER: 26824