ZipRecruiter

Log In

1

Internship Application Security Engineer Jobs in Chicago, IL

Ecolab

Senior Offensive Security Engineer

Naperville, IL · On-site

$114K - $156K/yr

Partner with product security, application engineering, cloud engineering, IoT engineering, architecture, and business teams to translate testing results into clear remediation actions and risk-based ...

tms

AI Security Engineer

Chicago, IL · On-site

Roles and Responsibilities AI Engineering Security * Evaluate AI tools, models, and platforms for ... SaaS Application Security Reviews * Lead third-party SaaS application security assessments ...

tms

AI Security Engineer

Chicago, IL · On-site

Roles and Responsibilities AI Engineering Security * Evaluate AI tools, models, and platforms for ... SaaS Application Security Reviews * Lead third-party SaaS application security assessments ...

Myconsumers

Application Security Analyst

Lake Forest, IL · On-site

$67.98 - $108.77/hr

Identify and analyze vulnerabilities, partnering with developers to drive timely, effective ... in application security or software development with security responsibilities * 2 years ...

New

Beyond Finance

Security Engineering Manager

Chicago, IL · On-site

$170K - $200K/yr

Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company's development lifecycle and cloud environment.

previous page

Showing results 41-60

All JobsApplication Security Engineer JobsInternship Application Security Engineer JobsInternship Application Security Engineer Jobs in Chicago, IL

Internship Application Security Engineer information

See Chicago, IL salary details

$30

$68

$99

How much do internship application security engineer jobs pay per hour?

As of Sep 4, 2026, the average hourly pay for internship application security engineer in Chicago, IL is $68.40, according to ZipRecruiter salary data. Most workers in this role earn between $58.17 and $77.74 per hour, depending on experience, location, and employer.

What does an internship application security engineer do?

An Internship Application Security Engineer assists in identifying, analyzing, and mitigating security vulnerabilities in software applications. They work alongside experienced security engineers to conduct code reviews, run security tests, and implement best practices for secure software development. Interns may also help with documenting findings, researching new security threats, and educating development teams on security protocols. This role provides hands-on experience in safeguarding applications against common cyber threats while developing technical and analytical skills.

What types of projects and tasks can I expect to work on as an internship application security engineer?

As an Internship Application Security Engineer, you can expect to be involved in a variety of hands-on projects such as conducting vulnerability assessments, assisting with penetration testing, and reviewing source code for security flaws. You may also help develop and implement security best practices within the software development lifecycle, collaborate with software engineers to remediate identified issues, and contribute to security awareness initiatives. This role typically offers exposure to real-world security challenges and provides mentorship from experienced security professionals, helping you build foundational skills for a future career in cybersecurity.

What are the key skills and qualifications needed to thrive as an internship application security engineer, and why are they important?

To thrive as an Internship Application Security Engineer, you need a foundational understanding of application development, cybersecurity principles, and familiarity with programming languages like Python or Java, often supported by coursework or certifications in information security. Experience using tools such as Burp Suite, OWASP ZAP, and static code analyzers is typically required. Strong analytical thinking, attention to detail, and effective communication skills distinguish top candidates in this role. These skills are vital to identify, communicate, and help remediate security vulnerabilities, ensuring robust protection for software applications.

What are the most commonly searched types of Application Security Engineer jobs in Chicago, IL?

The most popular types of Application Security Engineer jobs in Chicago, IL are:

What are popular job titles related to Internship Application Security Engineer jobs in Chicago, IL?

For Internship Application Security Engineer jobs in Chicago, IL, the most frequently searched job titles are:

What job categories do people searching Internship Application Security Engineer jobs in Chicago, IL look for?

The top searched job categories for Internship Application Security Engineer jobs in Chicago, IL are:

What cities near Chicago, IL are hiring for Internship Application Security Engineer jobs?

Cities near Chicago, IL with the most Internship Application Security Engineer job openings:

Internship Application Security Engineer jobs near you
Infographic showing various Internship Application Security Engineer job openings in Chicago, IL as of August 2026, with employment types broken down into 41% Full Time, and 59% Contract. Highlights an 79% In-person, and 21% Remote job distribution, with an average salary of $142,280 per year, or $68.4 per hour.

Senior Offensive Security Engineer

Ecolab

Naperville, IL • On-site

$114K - $156K/yr

Full-time

Re-posted 5 days ago

Ecolab rating

7.5

Company rating: 7.5 out of 10

Based on 211 frontline employees who took The Breakroom Quiz

57th of 103 rated chemical manufacturers

Job description

The Senior Offensive Security Engineer, Commercial Products will perform hands-on offensive security testing across Ecolab's commercial digital product portfolio. This role will focus on technical testing of customer-facing commercial products, including web and mobile applications, APIs, cloud services, IoT solutions, PLC/IPC-connected equipment, embedded or field-deployed devices, and related product integrations. The Senior Offensive Security Engineer, Commercial Products will actively perform security testing for most of their time while supporting offensive security engagements, mentoring engineers as needed, and helping improve engagement scope, testing methods, reporting quality, remediation validation, and risk-based prioritization. This role will partner closely with product security, engineering, architecture, cloud, IoT, legal/compliance, and business stakeholders to identify vulnerabilities before they are discovered externally and to help improve the security maturity of Ecolab's commercial offerings.
What you will do:
  • Perform hands-on offensive security testing across Ecolab commercial products, including web applications, mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment, embedded devices, and product integrations.
  • Plan, scope, and execute technical security assessments focused on identifying exploitable vulnerabilities, attack paths, insecure configurations, weak access controls, exposed secrets, insecure APIs, cloud misconfigurations, and product-specific security gaps.
  • Support offensive security engagements and mentor engineers as needed while remaining highly hands-on in day-to-day testing, analysis, documentation, and remediation validation activities.
  • Contribute to repeatable red team and offensive testing methods, engagement rules, reporting standards, evidence expectations, and risk-rating approaches appropriate for commercial digital products.
  • Partner with product security, application engineering, cloud engineering, IoT engineering, architecture, and business teams to translate testing results into clear remediation actions and risk-based priorities.
  • Conduct safe and authorized technical testing of IoT and industrially connected equipment, including physical access testing of product hardware, field devices, PLC/IPC interfaces, device communications, and related technology components where appropriate.
  • Use commercial and enterprise-approved security tools such as Snyk, Wiz, Burp Suite, OWASP ZAP, GitHub Advanced Security, Nmap, Horizon3 NodeZero, DAST tooling, and related technologies to identify, validate, and document security issues.
  • Validate vulnerabilities discovered through internal testing, automated scanning, third-party penetration testing, customer inquiries, bug reports, and product security reviews.
  • Prepare clear, actionable reports that explain vulnerability impact, exploitability, business context, affected assets, remediation guidance, compensating controls, and validation results.
  • Present technical findings to engineering teams and non-technical stakeholders at all levels of the organization, communicating risk, business impact, and practical remediation paths.
  • Support product threat modeling, secure architecture reviews, application security reviews, cloud security assessments, and security design discussions based on offensive testing insights.
  • Support improvements to Ecolab's vulnerability management, secure SDLC, DevSecOps, and product security governance practices by identifying recurring weakness patterns and practical control improvements.
  • Support coordination with third-party penetration testing providers when appropriate, including scope development, test readiness, evidence review, finding validation, and remediation tracking.
  • Maintain awareness of emerging offensive security techniques, AI-enabled attack methods, application security risks, cloud security trends, IoT attack vectors, and relevant industry standards.
  • Act as an advocate and champion for practical, risk-based product security across Ecolab's commercial digital product teams.

Minimum Qualifications:
  • Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related technology-driven field.
  • 5+ years of hands-on experience in cybersecurity, application security, offensive security, penetration testing, product security, cloud security, IoT security, software engineering, or related technical field.
  • Demonstrated hands-on experience performing authorized technical security testing of web applications, mobile applications, APIs, cloud services, and/or IoT-connected products.
  • Experience supporting offensive security engagements, vulnerability assessments, penetration tests, remediation validation, and technical security reporting.
  • Experience supporting technical workstreams, mentoring engineers, or coordinating testing activities while remaining directly involved in hands-on testing and analysis.
  • Experience with Microsoft Azure; familiarity with AWS and/or GCP cloud security concepts, services, and common misconfiguration risks.
  • Experience with application security testing tools and practices, including SAST, SCA, DAST, API testing, cloud security posture assessment, vulnerability validation, and secure code review concepts.
  • Familiarity with tools such as Snyk, Wiz, Burp Suite, OWASP ZAP, GitHub Advanced Security, Nmap, Horizon3 NodeZero, DAST tooling, and related offensive or product security testing technologies.
  • Knowledge of secure software development, DevSecOps, CI/CD pipelines, identity and access management, encryption, secrets management, secure API design, and secure cloud architecture principles.
  • Understanding of IoT, embedded, industrial, or field-deployed technology security considerations, including device communications, network segmentation, authentication, update mechanisms, and physical access risks.
  • Familiarity with industry frameworks and standards such as OWASP, CIS, NIST, ISO 27001, SOC 2, and secure SDLC practices.
  • Strong interpersonal, analytical, problem-solving, organizational, and written/verbal communication skills.
  • Ability to communicate technical findings clearly to software engineers, architects, cybersecurity leaders, product owners, and non-technical business stakeholders.
  • Ability to accommodate a flexible work schedule for supporting global activities.

Preferred Qualifications:
  • One practical offensive security certification such as OSCP, GPEN, GWAPT, GWEB, PNPT, or similar hands-on application, web, cloud, or penetration testing certification.
  • Experience testing commercial software products, SaaS platforms, customer-facing applications, cloud-hosted services, mobile applications, APIs, IoT platforms, or connected equipment.
  • Experience with hardware, embedded systems, PLC/IPC-connected devices, industrial communications, device provisioning, secure firmware/update processes, or field-deployed technology.
  • Experience with Azure security services, cloud-native application security, container security, Kubernetes security, and identity-based cloud controls.
  • Experience integrating offensive security findings into vulnerability management, secure architecture, threat modeling, product risk governance, and engineering remediation workflows.
  • Experience contributing to testing playbooks, reporting templates, engagement standards, risk-rating models, and remediation validation procedures.
  • Experience with AI-enabled products, AI integrations, or the security implications of AI/ML capabilities in commercial software environments.
  • Ability to influence without authority and drive security improvements across globally distributed engineering, product, and technology teams.

Annual or Hourly Compensation Range
The pay range for this position is $101,400.00 - $152,100.00. Many factors are taken into consideration when determining compensation, such as experience, education, training, geography, etc. We comply with all minimum wage and overtime laws.
Benefits
Ecolab strives to provide comprehensive and market-competitive benefits to meet the needs of our associates and their families. Click here to see our benefits.
If you are viewing this posting on a site other than our Ecolab Career website, view our benefits at jobs.ecolab.com/working-here.
Potential Customer Requirements Notice
To meet customer requirements and comply with local or state regulations, applicants for certain customer-facing roles may need to:
- Undergo additional background screens and/or drug/alcohol testing for customer credentialing.
Americans with Disabilities Act (ADA)
Ecolab will provide reasonable accommodation (such as a qualified sign language interpreter or other personal assistance) with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please visit the Recruiting Support link in the footer of each page of our career website.

What Ecolab employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Ecolab logo

About Ecolab

Sourced by ZipRecruiter

Ecolab is a global sustainability leader offering water, hygiene and infection prevention solutions and services that protect people and the resources vital to life.

Industry

Manufacturing

Company size

10,000+ Employees

Headquarters location

Saint Paul, MN, US

Year founded

1923

View All Ecolab Jobs

Apply