Application Security Analyst Intern

Join PatientPoint to be part of a dynamic team creating change in and around the doctor’s office. As a leading digital health company, we innovate to positively impact patient behaviors. Our purpose-driven approach offers an inspirational career opportunity where you can contribute to improving health outcomes for millions of patients nationwide.

Job Summary  
This role supports application security efforts by assisting with static and dynamic testing, secure code reviews, threat modeling, and vulnerability research under senior mentorship. The intern will help triage findings, document risks, contribute to security tooling and automation, and collaborate with engineers to promote secure coding practices. The role is designed to provide hands-on exposure to real-world AppSec tools, OWASP standards, and how security integrates into modern DevOps workflows. 

What You Will Do  

• Security Testing & Analysis 

• Assist in performing static (SAST) and dynamic (DAST) application security testing. 

• Help triage findings from automated scanners. 

• Participate in manual testing (under guidance) for common vulnerabilities such as SQL injection, XSS, or broken authentication. 

 

• Secure Code Review 

• Review code changes for security issues (often with senior mentorship). 

• Learn to use tools like SonarQube, Checkmarx, Fortify, or GitHub Advanced Security. 

• Document findings and recommend secure coding practices. 

 

• Threat Modeling & Research 

• Support threat modeling exercises by documenting potential attack paths. 

• Research emerging vulnerabilities, CVEs, and security advisories relevant to the tech stack. 

• Track security trends and update the team. 

 

• Tooling & Automation 

• Help integrate security tools into the CI/CD pipeline. 

• Write scripts for automating repetitive tasks (e.g., log parsing, results consolidation). 

• Support vulnerability management platforms (e.g., Jira, DefectDojo, Kenna). 

 

• Security Awareness & Documentation 

• Draft and maintain internal documentation for secure coding guidelines. 

• Assist in preparing developer training materials (e.g., OWASP Top 10 examples). 

• Work with engineers to clarify security requirements during development. 

 

• Learning & Development Focus 

 

• Since this is an intern role, the responsibilities usually balance hands-on tasks with learning opportunities: 

• Exposure to OWASP Top 10 and CWE/SANS Top 25. 

• Mentorship in real-world vulnerability assessment and remediation. 

• Understanding how security integrates with agile/DevOps workflows. 

 

• Typical Tools You Might Use 

• SAST/DAST tools: Burp Suite, OWASP ZAP, Fortify, Checkmarx 

• Dependency scanning: Snyk, Dependabot, Black Duck 

• CI/CD & version control: GitHub/GitLab, Jenkins 

• Issue tracking: Ji