IT Intern

Mayo Clinic is a healthcare organization advancing secure and AI-assisted software engineering practices. The Secure SDLC & Agentic DevSecOps Intern will support the design, testing, documentation, and demonstration of secure software delivery workflows incorporating AI, automation, security controls, traceability, and human oversight.

What you'll do:

• Help design and document a **Secure SDLC** spanning planning, requirements, architecture, development, testing, security validation, deployment, operations, and retirement
• Map security and engineering controls to specific stages of the software delivery lifecycle
• Help design and test **AI-assisted and agentic software development workflows**
• Explore how **Claude, ChatGPT/Codex, GitHub Copilot, and other approved AI engineering tools** can participate in development and DevSecOps workflows
• Build or test workflows in which AI assists with activities such as requirements analysis, coding, test generation, documentation, code review, security analysis, and remediation
• Work with **GitHub repositories, issues, branches, pull requests, CI/CD pipelines, and automated checks** to understand how software delivery controls can be implemented
• Help evaluate where AI agents can safely perform tasks autonomously and where **human review or approval** should remain required
• Assist with designing repeatable workflows for AI-generated code and agent-created changes
• Help define evidence and traceability requirements for software and AI-assisted engineering activities
• Experiment with automated testing, static analysis, dependency scanning, security checks, policy validation, and other DevSecOps capabilities
• Help develop **reference implementations, templates, workflows, diagrams, or proofs of concept** that demonstrate the Secure SDLC
• Document findings, design decisions, limitations, risks, and recommended engineering patterns

What they're looking for:

• This is a hybrid position and must be located within 100 miles of a Mayo Clinic campus for occasional on-site expectations based on business needs
• Candidates should have some foundational technical experience from coursework, personal projects, internships, or independent learning
• Introductory programming experience in **Python, Java, JavaScript/TypeScript, C#, or another programming language**
• Basic understanding of the **Software Development Lifecycle (SDLC)**
• Familiarity with **Git and GitHub**, including repositories, commits, branches, and pull requests
• Basic understanding of software testing and debugging
• Interest in cybersecurity, secure software development, DevOps, or DevSecOps
• Interest in generative AI and AI-assisted software engineering
• Strong analytical and problem-solving skills
• Ability to learn unfamiliar technologies and experiment with new approaches
• Ability to clearly document technical concepts, results, and decisions
• Curiosity about both **how software works and how it can fail**

Benefits:

• Flexibility of both remote and on-site work
• Earn overtime for hours worked over 40 in a work week