Summer Internship - Application Security Intern, AppSec

About Uphold

Uphold is a financial technology company that believes on-chain services are the future of finance. It provides modern infrastructure for on-chain payments, banking and investments. Offering Consumer Services, Business Services and Institutional Trading, Uphold makes pioneering financial services easy and trusted for millions of customers in more than 140 countries.

Uphold integrates with more than 30 trading venues, including centralized and decentralized    exchanges, to deliver superior liquidity and optimal execution. Uphold never loans out customer assets and is always 100% reserved. The company pioneered radical transparency and uniquely publishes its assets and liabilities every 30 seconds on a public website (https://uphold.com/en-us/transparency).

Uphold strips away the complexity and lack of transparency to open up Web3 finance for everyone.

To learn more about Uphold, please visit https://uphold.com.

The opportunity 

Uphold is looking for an intern to join our Application Security (AppSec) team for a Summer Internship. This is an exciting opportunity where you’ll dive into real-world product security, work closely with developers and security engineers, and contribute directly to improving the security of our products and infrastructure.

Primary responsibilities

As a Summer Intern in our Application Security (AppSec) team, you’ll get a unique first experience in cybersecurity, not in theory, but in practice. You’ll be part of a team that works directly with developers to build secure products, where security is respected and embraced, not feared or avoided. With the support of your mentor and buddy, you’ll explore how we find, analyze, and help fix vulnerabilities in real source code. You’ll also learn how modern companies approach AppSec in a structured, collaborative, and impactful way.

Required qualifications

• Currently pursuing or recently completed a degree in Computer Science, Cybersecurity, Engineering, or a related field.
• A hacker mindset, curiosity, persistence, and a passion for figuring out how things work (and how they fail).
• Experience solving security challenges (e.g., CTFs, Hack The Box, TryHackMe, custom labs, or similar).
• Comfortable with at least one programming language and reading/debugging source code (JavaScript, Python, Go, etc.).
• Basic knowledge of web security fundamentals, things like XSS, SQLi, SSRF, auth issues, etc.
• Some familiarity with security tooling (e.g., Burp Suite, Semgrep, CodeQL, or custom scripts).
• Fluent in English, both written and spoken.
  
  

Bonus if you have

• Contributed to GitHub repos or written blog posts about security findings, tools, or research.
• Participated in bug bounty programs or done vulnerability triage work.
• Exposure to DevSecOps pipelines or secure development practices.
• Interest in Web3 security, smart contracts, etc.
• Familiarity with version control, CI/CD pipelines, and how modern teams ship code.

What we offer

• 8-week program: July 20 to September 11, 2026.
• Work setup: Based in Braga or Porto with hybrid options available.
• Welcome gift: You’ll receive some cool Uphold swag!
• Mentor: A mentor will guide your work and provide ongoing feedback.
• Buddy: A buddy will help you settle in and support you along the way.
• Equipment: We’ll provide a laptop for the duration of your internship.
• Compensation: Successfully completing the internship makes you eligible for up to €2,840.

Join us to grow, innovate, and contribute meaningfully. Be part of our talented team!

Visit our careers page for more exciting opportunities, if this Summer internship isn’t the perfect fit.

EEOC Employer

We're proud to be an Equal Opportunity Employer and we celebrate our employees' differences, including race, color, religion, gender identity, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, and any other protected classes. Difference makes us stronger and better - together.