Latacora | Chicago, Remote (USA) You could pick a startup to do security work for. Or you could join our team and work for lots of startups, all at once. Latacora runs whole security teams for startups. We're a weird kind of consultancy: we have only one kind of client, and we work full-time with them for 6-18 months, doing everything every startup security team does, from software security to cryptography design to…
It would be additional overhead, but something on the internship->residency->training program spectrum could help the whole startup ecosystem.
Something akin to the Google Brain residency. It would act as a hiring pipeline for the company (as well as good PR and rep building) and a unique opportunity for participants.
There is no better experience than doing, and if you can work on several real-life systems over a fixed period of time with experts at your back ... well that's about as appealing as it gets.