Product Security Intern

About the Company

Funding Societies | Modalku is the largest SME digital finance platform in Southeast Asia. We are licensed and operating in Singapore, Indonesia, Thailand, Malaysia and Vietnam, and backed by Sequoia India (Peak XV), Softbank Vision Fund, Khazanah and SMBC bank. Funding Societies | Modalku provides business financing to SMEs funded by individual and institutional investors, as well as payments solutions to SMEs and consumers.

Responsibilities

• GenAI-Accelerated Security: Research and prototype ways to use Large Language Models (LLMs) and Generative AI to automate threat modelling, triage vulnerability reports, and generate remediation code for developers
• Autonomous Penetration Testing: Assist in evaluating, building, or deploying autonomous Secure AI agents and scripts designed to automate offensive security testing within our test environments
• Secure SDLC Integration: Work alongside security engineers to integrate and tune Static (SAST), Dynamic (DAST), supply chain security and Software Composition Analysis (SCA) tools within CI/CD pipelines
• Vulnerability Management: Analyse security findings, filter out false positives, and collaborate with software engineers to remediate potential vulnerabilities
• Research & Documentation: Stay up to date on AI-driven attack vectors (e.g., prompt injection, model poisoning) and document internal security guidelines for safe AI adoption

Qualifications

• Core Security Knowledge: Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and fundamental security concepts (authentication, cryptography, networking)
• Programming Skills: Proficiency in at least one programming or scripting language (e.g., Python, Go, JavaScript, or bash) to write automation scripts and interact with APIs
• AI/ML Curiosity: Strong interest in Generative AI, LLMs, and how AI can be applied offensively and defensively in cybersecurity; prior experience using LLM APIs (OpenAI, Gemini, Anthropic) is a major plus
• Builder's Mindset: Familiarity with modern software development stack/tools, version control (Git), and an understanding of basic CI/CD concepts
• Problem Solver: Excellent analytical skills with a proactive approach to tackling complex, ambiguous problems
• Education: Background in Computer Science, Cybersecurity, Information Security, or a related technical field

Benefits

• Expert Mentorship & Training: Hands-on learning from in-house security experts across the SDLC
• Strategic Collaboration: Work closely with security engineers on the GenAI-accelerated security program
• Impact: Research and code will directly influence how the security team scales its operations
• Flexible working, mental health and wellness initiatives, company laptop and tech support

Additional Information

• Work arrangement: onsite
• Employment type: part-time (intern)