Software Security Intern

Job Description and Requirements

About Synopsys Software Integrity Group (SIG)
Synopsys Software Integrity Group helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Synopsys, a recognized leader in application security, provides static analysis, software composition analysis, and dynamic analysis solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Synopsys helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

For more information, go to www.synopsys.com/software.

General Responsibilities
As Synopsys engages with clients in the application of our software security improvement methodologies, the Security Services Intern joins in the execution and delivery of planned project deliverables and milestones that assist clients in learning, understanding, and applying Synopsys’ secure software development methodologies. The Software Security Intern typically has task responsibility within one project and develops the capability to perform tasks within one or more of Synopsys’ security practices. The Intern continuously learns and expands his/her technical competence. Our Interns make themselves and their team indispensable advisors to our customers: they build the relationships that help create and identify follow-on assignments.

Synopsys has two primary objectives for Internship training
•First, to have interns gather cutting-edge expertise in securing implementations of the latest software technology platforms and automating their analysis using code analysis tools
•Second, to have interns follow Synopsys’ Software Risk Management approach to identify security vulnerabilities and quality defects and determine the steps needed to harden the software

Program Supervision and Evaluation
Synopsys prefers the ‘apprenticeship’ model for employee development. The intern will work with and under the direct supervision of senior staff members performing analysis and documenting results. The trainee will acquire skills in line with use of portions of the Software Risk

Management Methodology Including
•Penetration testing of dynamic applications
•Analysis of software design and source code
•Knowledge of building secure, robust software systems
•Specific knowledge for automating code security analysis techniques on the latest software technology platforms

Qualifications and Experience
Synopsys technical employees must be familiar with the technologies employed by our customers: web application frameworks, secure distributed component architectures, database management systems, real-time embedded systems, and intelligent devices, to name just a few. As a consulting business we require exceptional communication skills.

Our consultants make use of a broad range of skills every day including technologies like:
Java, Spring, Struts, Servlets, JAAS, XML, AJAX, JavaScript, .NET, C#, VB, C, C++, Perl, Python, PHP, Ruby on Rails, Flash, ActionScript, SQL, UNIX scripting, HTML5, Assembly

Experience with the following technologies and activities are beneficial
•Software Quality Assurance, Software Security Fundamentals, Cryptography, Penetration Testing, Source Code Analysis
•Source Code Analysis tools like Fortify, AppScan Source Edition, Coverity
•Penetration testing tools like Burp Proxy, Fiddler, AppScan Standard Edition, Firebug, IDA Pro, Nessus, OllyDbg, GDB, Immunity Debugger, API Monitor, SysInternal toolkit, Wireshark, NMap, MetaSploit

Education and Certifications
At least 2 years of college education