Security Researcher Intern, Roku

• Currently enrolled in a Bachelor, MS or PhD program in CS, CE, EE, or a closely related field
• Strong programming skills in C/C++ and Python, with experience working on non‑trivial systems code
• Solid foundation in OS concepts, algorithms/data structures, and Linux development (shell, build systems, debugging tools)
• Comfortable with git and modern CI systems (e.g., GitLab, GitHub Actions)

Desirable

• At Roku, our Trust Engineering team is a close-knit group of passionate professionals
• We work collaboratively, sharing insights and expertise to stay ahead of the curve
• Join us, and you’ll be part of a dynamic team that thrives on challenges and celebrates victories together
• Join Roku’s Trust Engineering team as a Security Researcher Intern, where your passion for security and technology will help drive our success
• We offer a paid 12-week internship, starting in Summer 2026
• As a Security Researcher Intern, you’ll be assigned a scoped project that strengthens our security posture
• You will improve our firmware security tooling by enhancing CodeQL‑based static analysis, building coverage‑guided QEMU fuzzing harnesses, and owning an end‑to‑end research‑driven engineering project
• Design and implement static analysis improvements:
• Extend CodeQL queries/extractors to cover new firmware components
• Reduce noise via diff‑aware analysis, deduplication, and better handling of dead code
• Make results more actionable for engineers (grouping, severity, exploitability hints)
• Build and enhance fuzzing and dynamic analysis:
• Prototype or extend QEMU‑based harnesses using frameworks such as AFL++ or Syzkaller
• Add instrumentation and coverage reporting to guide corpus evolution and test effectiveness
• Feed fuzzing results back into static analysis as new rules or patterns
• Own a well‑scoped research‑plus‑engineering project from design through implementation, evaluation, documentation, and an end‑of‑internship presentation