Security Intern, Threat Operations

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Evaluate incoming threat intelligence, determining its credibility and relevance to 1Password, while conducting IOC sweeps throughout the environment.

• Take ownership of tasks across the threat management lifecycle, transforming intelligence into actionable recommendations for detection, incident response, and vulnerability management.

• Participate in the alert triage rotation to understand how signal quality, enrichment, and response integrate.

• Design and test detection rules and response agents.

• Contribute to platforms focused on detection-as-code and response-as-code.

• Create orchestration workflows to automate triage, enrichment, and response utilizing AI tools.

• Collaborate with Cyber Threat Intelligence, Detection Engineering, and Security Incident Response teams.

⛳️ Requirements

• Eagerness to embrace new challenges and see them through to completion.

• Openness to ask questions and learn from errors.

• A curious mindset with an interest in enhancing processes.

• Ability to work effectively in a team setting.

• Legally authorized to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship provided.

• Must currently be enrolled at an educational institution.

• Anticipated graduation date is required.

• Familiarity with Git and managing infrastructure or detections as code, including Terraform.

• Experience with scripting or programming languages, such as Python or Go, and comfort with APIs.

• Exposure to SIEM and SOAR tools, logs, or experience writing detection rules and queries through coursework, labs, or projects.

• Experience using AI tools to build or automate workflows, along with a healthy skepticism regarding their outputs.

• Familiarity with MITRE ATT&CK, security coursework, CTFs, home labs, or participation in a security club.

• Successful candidates must complete a background check.

🏝️ Benefits

• Generous PTO policy - 2.08 days per month (1.5 work weeks per 4-month term).

• Company-wide wellness days (1 per quarter).

• Employee-led inclusion and belonging programs and ERGs.

• Remote-first work environment.

• Peer-to-peer recognition through Bonusly.

• Access to 1Password University and learning sessions.

• Monthly internship events and social gatherings.

• Opportunities for travel for in-person engagements, including annual department-wide offsites, team meetings, and customer/industry events.