Description
1Password is growing rapidly and is looking for a Security Intern to join their Threat Operations team. The intern will work across Cyber Threat Intelligence, Detection Engineering, and Security Incident Response teams to analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across the environment.
Responsibilities:
- Analyze incoming threat intelligence and assess its credibility and relevance to 1Password
- Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management
- Join the alert triage rotation and learn how signal quality, enrichment, and response fit together
- Develop and test detection rules and response agents, and contribute to detection-as-code and response-as-code platforms
- Build orchestration workflows to automate triage, enrichment, and response, using AI tools
Requirements:
- Confidence and willingness to take on new challenges
- Humility and ability to ask questions and learn from mistakes
- Curiosity and drive to find better ways of doing things
- Teamwork and ability to work collaboratively
Nice to have:
- Familiarity with Git and managing infrastructure or detections as code
- Scripting or programming experience in languages like Python or Go
- Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries
- Experience using AI tools to build or automate workflows
- Familiarity with frameworks like MITRE ATT&CK
Benefits:
- Generous PTO policy
- Company-wide wellness days
- Employee-led inclusion and belonging programs and ERGs
- Remote-first environment
- Peer-to-peer recognition through Bonusly
- 1Password University access and learning sessions
- Monthly internship events and socials