Information Security Co-op – Code Security – Spring 2027

Make banking a Fifth Third better® We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank. GENERAL FUNCTION: The Information Security organization is responsible for safeguarding the bank’s digital assets, customer data, and critical infrastructure against evolving cyber threats. These teams work collaboratively to embed security into all business processes and technologies and stand at the ready  to protect the bank against emerging threats. By defining and maintaining a strong security posture, the Information Security organization plays a critical role in advancing Fifth Third’s mission to be the One Bank people most value and trust. The Information Security Co-Op will directly support this mission by contributing to the placement team’s active security projects and initiatives. Actual deliverables and responsibilities will vary by team and are more clearly defined below. ASSIGNMENT OVERVIEW: The Code Security Co-op supports the Code Security team in maintaining and enhancing the bank's API Security, Static Application Security Testing (SAST), and Software Composition Analysis (SCA) capabilities. Working alongside experienced security engineers, the co-op assists with operating and improving security tooling, vulnerability analysis, and developer enablement activities. The co-op will gain hands-on experience with both shift-left and runtime application security practices. Responsibilities may include analyzing API, SAST, and SCA findings, enhancing security tool integrations and automation, and partnering with engineering teams to identify potential security risks throughout the software development lifecycle and provide guidance for remediation. This role provides practical experience in application and API security while developing technical, analytical, and communication skills in a professional enterprise environment. ESSENTIAL DUTIES & RESPONSIBILITIES: Support SAST, SCA, and API Security platforms. Maintain and optimize security scanning and runtime monitoring capabilities. Analyze security findings and assist development teams with vulnerability remediation and risk reduction. Provide end-user support and troubleshooting for Code Security tools/platforms. Build automation and one-off solutions to improve security workflows and reduce operational overhead. Utilize Infrastructure as Code (IaC) practices to deploy and manage tooling and supporting infrastructure. Collaborate with development, DevOps, and security teams to emphasize security throughout into the SDLC.

None. MINIMUM KNOWLEDGE, SKILLS & ABILITIES REQUIRED: Must be authorized to work in the U.S. without the need for employment-based immigration sponsorship now or in the future. Current enrollment in accredited undergraduate degree program studying Cybersecurity, Computer Science, or similar relevant field Strong academic record with a minimum cumulative GPA of 3.0. Self-discipline and time management skills, especially in a virtual work setting Willingness and ability to learn new tools, technologies, and concepts Strong analytical, troubleshooting, and communication skills Basic understanding of core Information Security principles Familiarity with API Security, SAST, and SCA Basic experience in one or more modern programming languages (Javascript, Python, etc) PREFERRED KNOWLEDGE, SKILLS & ABILITIES Familiarity with OWASP Top 10 2025 Experience with AWS or similar Cloud technologies Experience withTerraform or similar Infrastructure as Code technologies Relevant internship experience Information Security Co-op – Code Security – Spring 2027 At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be