Browser Security Engineer Intern, (Winter 2027)
A large share of internet traffic isn't people. It's bots: automated scripts dressed up as real users, probing for weaknesses and slipping past defences built for humans. GeoComply is a leader in telling the difference, and BrowserGuard is where that fight happens in the browser.
This is a fundamental research role on our push to catch the browser-based bots that beat the signals we have today. You won't be doing general software engineering. You'll be doing original research: studying how modern bots evade detection at the browser level, and inventing the new signals that catch them.
Over four months the goal is ambitious on purpose. You'll generate and validate a body of net-new detection signals, ideas strong enough to become real features in BrowserGuard and proven against real customer data. Our engineers can build and test what you find. Your job is to find what they haven't.
If it's good, GeoComply's engineers will build and test what you find.
What You’ll do:
-
Study how browser-based bots evade current detection, working close to the Chromium and JavaScript internals where the signals actually live.
-
Form and test original hypotheses about what gives a bot away, producing a steady stream of net-new detection signals and feature ideas for BrowserGuard (Project Decard).
-
Validate your ideas against real customer data, so what you propose catches bots the current system misses without flagging real users.
-
Hand your best signals to the engineering team in a form they can build and ship.
-
Embrace Stretch Opportunities (The Fun Part!): As a GeoComply intern, expect to be pushed. You'll be given special, high-value projects outside the immediate scope of your role, a chance to explore new skills, test your limits, and adapt to new challenges across the business.
Requirements
-
A Master's or PhD-level computer science student or recent grad, or someone with equivalent depth.
- A real programmer with research instincts. You've done work where the answer wasn't known in advance.
-
An understanding of bleeding edge bot detection and fraud strategies, and you want to learn more.
-
You are deep in the browser. You know JavaScript from the inside, and you're comfortable or could learn Chromium internals and internet protocols.
-
Independent and relentlessly curious. You're at your best pulling apart how something works, not waiting for direction.
What this role is (and isn't)
This role is:
-
Original research, not just implementation. You generate the ideas and prove them out; our engineers build them.
-
Deeply independent. You'll set your own research direction and drive it.
-
Genuinely hard. This is a frontier problem with no answer key, built for someone who wants to disrupt how things work, not follow a plan.
- High potential for a return offer and full time role if your signal measurably extend detection.
-
A general software-engineering internship, or a role with a set checklist to execute.
-
A fit if you wait to be told what to do, or lose interest when a problem is wide open.
-
A slow ramp. You'll be expected to grasp the codebase and start contributing real ideas within your first few weeks, not months.
This role is not:
Bonus Points if (this is for things that are NICE to have, but not needed)
-
You've contributed to the Chromium project or other open-source browser or security work.
-
Prior research in bot detection, anti-fraud, anti-spoofing, or adversarial ML.
-
You've published or presented original technical research
What You'll Gain
-
Real ownership of original research on GeoComply's fraud and detection frontier, evaluated by the people who lead it.
-
A rare thing for a student: fundamental computer-science research that ships, and pays.
-
A genuine path to a full-time offer if your output is strong.
-
Mentorship from the BrowserGuard team, working in-office in Vancouver alongside senior engineers.
-
Room for Growth: We think young talent has so much to offer. Your work will have a meaningful impact on your team and the organization, and will allow you to grow your skills, network, and career.
Skills
As published by lever · 15 questions · 5 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Website, Blog or Portfolio URL, Other website, Which age group do you belong to?, What gender do you identify as?, How would you best describe your race? (Please select all that apply), Have you ever served on active duty in the military?, Do you consider yourself to have a condition, impairment, or disability?
Pick from a list (9)
- Are you currently enrolled in, or have recently completed a Master's or PhD in Computer Science or a related field?
- Are you legally entitled to work in the location of this job posting? optional
- We have an in-person office attendance policy. Are you able to be in the location of this position by the start date?
- University / College (if your school is not there, please write it into the next question) optional
- What is your expected graduation year? optional
- Are you potentially available for another internship term after this one? optional
- Where did you hear about this position? optional
- Are you part of GeoComply's Preferred Talent Network? optional
- Can you start in-person at the location of this internship as of the start date?
Written answers (5)
- If you do not currently hold or expect a Master's/PhD in CS: briefly outline how your personal projects, research, or open-source/Chromium work give you equivalent depth for this research role. (Leave blank if you answered Yes above.) optional
- Please link any research studies you've contributed to (if applicable)
- Please add your github link if you didn't already do so above optional
- Please add your faculty, program or co-op department (E.G. "SFU BA - Psychology Honours" ... E.G. "Stanford Physics Co-op") optional
- Anything else we should know? :) (Optional) optional
Attachments (1)
- Please upload your most recent transcript for your program (unofficial is fine)