IT Intern

Secure Sdlc & Agentic Devsecops Intern

AI is changing not only the software organizations build, but also how software is designed, coded, tested, secured, deployed, and operated.

Mayo Clinic is advancing a Secure Software Development Lifecycle (Secure SDLC) that incorporates modern AI-assisted engineering and emerging agentic Dev Sec Ops  capabilities while maintaining appropriate security, quality, traceability, and engineering controls.

The Secure SDLC & Agentic Dev Sec Ops  Intern will work directly with technical leadership on the design, build, testing, and documentation of these next-generation software delivery practices.

This is a 90-day learning-focused technical internship for students interested in software engineering, cybersecurity, Dev Sec Ops , automation, AI engineering, or software architecture. The intern does not need professional software engineering experience but should be eager to understand how modern software moves securely from an idea to production.

The intern will contribute to work at the intersection of software engineering, security, automation, and AI.

Activities may include:

• Help design and document a Secure SDLC spanning planning, requirements, architecture, development, testing, security validation, deployment, operations, and retirement.
• Map security and engineering controls to specific stages of the software delivery lifecycle.
• Help design and test AI-assisted and agentic software development workflows.
• Explore how approved AI engineering tools can participate in development and Dev Sec Ops  workflows.
• Build or test workflows in which AI assists with activities such as requirements analysis, coding, test generation, documentation, code review, security analysis, and remediation.
• Work with Git Hub repositories, issues, branches, pull requests, CI/CD pipelines, and automated checks to understand how software delivery controls can be implemented.
• Help evaluate where AI agents can safely perform tasks autonomously and where human review or approval should remain required.
• Assist with designing repeatable workflows for AI-generated code and agent-created changes.
• Help define evidence and traceability requirements for software and AI-assisted engineering activities.
• Experiment with automated testing, static analysis, dependency scanning, security checks, policy validation, and other Dev Sec Ops  capabilities.
• Help develop reference implementations, templates, workflows, diagrams, or proofs of concept that demonstrate the Secure SDLC.
• Document findings, design decisions, limitations, risks, and recommended engineering patterns.
• Collaborate with software engineering, security, architecture, platform, and AI teams.

Areas You May Explore

Depending on the project and the intern's interests, the internship may provide exposure to:

• AI-Assisted Software Engineering
• Secure SDLC
• Dev Sec Ops
• Agentic Engineering

Basic Skills

Candidates should have some foundational technical experience from coursework, personal projects, internships, or independent learning.

Helpful skills include:

• Introductory programming experience in Python, Java, JavaScript/Type Script, C#, or another programming language.
• Basic understanding of the Software Development Lifecycle (SDLC).
• Familiarity with Git and Git Hub, including repositories, commits, branches, and pull requests.
• Basic understanding of software testing and debugging.
• Interest in cybersecurity, secure software development, Dev Ops, or Dev Sec Ops .
• Interest in generative AI and AI-assisted software engineering.
• Strong analytical and problem-solving skills.
• Ability to learn unfamiliar technologies and experiment with new approaches.
• Ability to clearly document technical concepts, results, and decisions.
• Curiosity about both how software works and how it can fail.

Experience with APIs, CI/CD, Git Hub Actions, cloud platforms, containers, security tools, or AI agents is beneficial but not required.

What You'll Learn

By the end of the internship, the intern should have practical exposure to:

• How enterprise software moves from idea through production.
• Secure software engineering principles.
• Modern Git Hub-based development workflows.
• CI/CD and Dev Sec Ops .
• Software security and…