Information Security Engineer

About the company 

General Matter enriches uranium.

We are designing, building, and operating the world’s lowest-cost enrichment services, here in the US.  

In the process, we are restoring America’s ability to produce nuclear fuel to power AI, advanced manufacturing and critical industries our country relies on to remain competitive. 

Fuel drives the cost of advanced reactor electricity production, and enrichment drives the cost of the fuel that advanced reactors consume.  Reliable, low-cost enrichment is the catalyst for the nuclear Renaissance now under way.

Our mission is to make nuclear not only the cleanest and safest source of baseload power, but also the most affordable.  We believe abundant nuclear energy will lead to a post-scarcity society. 

We were incubated inside Founders Fund, like Anduril and Palantir before us, and are backed by over a dozen of the world's top venture capital firms.  

Our lean, world-class team of engineers and operators is applying a first-principles approach to solving the problem of nuclear fuel production.  

We are a mission-driven company with a culture of urgency, accountability, and transparency. 

Help us build a high-energy society by making the cleanest, safest form of baseload energy the most affordable. 

About This Role

General Matter builds its own technology: the software, firmware, control systems, and infrastructure that run an industrial nuclear fuel facility. At most companies, a security bug costs you data. Here, the software we build, and any security vulnerabilities we miss, touch the real world. The Security team's job is to find those gaps before anyone else does. We do that through offensive testing, code audits, design reviews, and hardening the systems we ship. 

As an intern on the team, you'll attack General Matter's products and infrastructure, while working with the engineers who own them to fix what you find. Targets include web apps, APIs, Linux and Windows hosts, cloud environments, embedded devices, and industrial controllers. You'll own real projects from start to finish, and you won't be writing policy documents

Responsibilities

• Break everything you touch, then help us fix it. 
• Run penetration tests against General Matter networks, services, web applications, and APIs. Prove what you find with working proof-of-concept exploits. 
• Audit source code and features for security vulnerabilities in languages like Python, C, C++, Rust, Go, and TypeScript. Then build static analysis rules or CI checks so the same class of bug can't come back. 
• Reverse engineer and attack embedded devices and industrial equipment on an isolated test bench. That includes firmware extraction, binary analysis on x86 and ARM, debug interfaces (JTAG, SWD, UART), and PLC and industrial protocol implementations (Modbus, EtherNet/IP, OPC UA).