Intern

Job summary

Position Summary: Spectral AI, Inc. (Spectral) is seeking a Cybersecurity Engineering Intern to join our growing design and development team. The position is based in Dallas, Texas, with hybrid work flexibility in accordance with the Spectral Employee Handbook guidelines.

Qualifications

• encryption standards, authentication and authorization controls, and security-relevant logging.
• Assist in evaluating SOUP/OTS components for vulnerabilities, maintenance status, and compliance with FDA software bill of material (SBOM)
• Support the creation and ongoing maintenance of SBOM (e.g.
• CycloneDX, SPDX) using automated
• Required education and experience:
• Currently enrolled in, or recently completed, a Bachelor’s or Master’s degree program in Computer Science, Cybersecurity, Electrical/Computer Engineering, or a related field.
• Coursework, academic projects, or prior internship exposure related to cybersecurity, software development, or networking; familiarity with regulated or safety-critical systems is a plus but not required.
• Strong written communication
• Familiarity with Windows and Linux operating systems; exposure to cloud platforms (AWS/Azure) and secure configuration is a plus.
• Preferred
• Coursework or project exposure to regulated software or FDA medical device documentation.
• Hands-on experience with Windows, Linux, or embedded operating systems through coursework or personal projects.

Responsibilities

• Cybersecurity Risk Management
• Assist with cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis) under the supervision of senior engineers.
• Help document risk evaluations aligned with AAMI TIR57, AAMI TIR97, FDA Premarket Cybersecurity Guidance, and ISO 14971.
• Observe and participate in Coordinated Vulnerability Disclosure (CVD) processes, learning how vulnerabilities are responsibly reported, remediated, and communicated in alignment with industry best practices.
• Help maintain and update cybersecurity documentation and supporting artifacts, including:
• Security risk assessment
• Security risk management reports
• Threat models
• Secure Software Development (IEC 81001 and IEC 62304)
• Learn and apply secure coding practices alongside software engineers, and participate in structured code review processes.
• Help verify implementation of security

Skills

Certifications

Degrees

Languages

Travel

Industry

Company size