Security Intern, Threat Operations
New
1
1PasswordCybersecurity
This is a remote opportunity within Canada/US.InternshipEntry
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonGitGoRESTful APIsTerraform
Requirements
- Be willing to take on new challenges and see them through to completion.
- Be willing to ask questions, make mistakes, and learn from them.
- Look for better ways of doing things.
- Work collaboratively as part of a team.
- Bonus: Familiarity with Git and managing infrastructure or detections as code, including Terraform.
- Bonus: Scripting or programming experience, such as Python or Go, and comfort working with APIs.
- Bonus: Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries through coursework, labs, or projects.
- Bonus: Experience using AI tools to build or automate workflows, with a healthy skepticism about their output.
- Bonus: Familiarity with frameworks like MITRE ATT&CK, plus security coursework, CTFs, home labs, or a security club.
Responsibilities
- Analyze incoming threat intelligence and assess its credibility and relevance to 1Password.
- Run IOC sweeps across the environment.
- Turn intelligence into recommendations for detection, incident response, and vulnerability management.
- Join the alert triage rotation and learn how signal quality, enrichment, and response fit together.
- Develop and test detection rules and response agents, and contribute to detection-as-code and response-as-code platforms.
- Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help design and build them.
View Full Description & ApplyYou'll be redirected to the employer's site