Job title: Internship | Security Engineer Analyst (ZTNA)

Location: Paris, France

About Ledger

We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger.

At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 millions units already sold in 200 countries.

If you are a final-year student in computer security or networks with a strong interest in Security with a particular interest in Zero Trust and infrastructure-level security? Join Ledger for a six-month internship within the Cyber Security Engineering team to help design, test, and improve our ZTNA and Network Security Architecture.

You will work closely with Security Engineering, Infrastructure/SRE, and Platform teams on production-grade environments for Ledger internal infrastructure.

What you’ll be doing:

• Work with Security Engineering and Infrastructure / SRE and IT teams to strengthen Ledger’s network and access security model.
  Map and document application and admin flows (who/what/where) and propose Zero Trust patterns (per-app access, identity-aware gateways, strong auth).

• Contribute to PoCs and integrations for ZTNA / SASE / secure access solutions (e.g. controlled access to cloud consoles, internal admin tools, and critical SaaS).

• Help define and document reference architectures, diagrams, and runbooks for secure remote access and network security.

• Where relevant, contribute small scripts/tools (Python, shell, etc.) to automate validation, configuration checks, or data collection.

What we’re looking for:

• Solid understanding of network fundamentals: TCP/IP, routing, DNS, VPN, HTTP(S), TLS.

• Good grasp of core security concepts: Zero Trust, least privilege, segmentation, identity- and context-based access.

• Comfortable with Linux environments and at least one scripting language (ideally Python) plus basic Git usage.

• Interest in cloud environments (AWS/GCP/Azure or similar) and modern access patterns (bastions, proxies, SASE/ZTNA).

• Ability to read and challenge technical documentation and propose pragmatic improvements.

• Proactive, curious, and willing to dive into low-level technical details.

• Interest in Web3 and hardware wallets is a plus and provides useful context on Ledger’s ecosystem.
  

This internship can lead to roles such as:

• Security Engineer (Network / Access / Cloud)

• Zero Trust / ZTNA Security Engineer or Consultant

• Infrastructure Security Architect

At Ledger, we are dedicated to continually investing in our employees which is why we offer more than just salaries; we provide comprehensive compensation packages that include a wide range of benefits.

For regionally specific benefits, your Talent Acquisition contact will be able to provide you with more information.

We’re committed to building an inclusive hiring process. If you need any adjustments or accommodations, just let us know, we’ll do our best to support you.