Application Security Intern

Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer. We're looking for an Application Security Intern. This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. This role is fully remote within the US.

The work:

• Help review access lists and remove accounts that are no longer needed.
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.
• Triage phishing emails reported by staff and update block lists.
• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Monitor dependency alerts from Dependabot and Snyk.

You should be:

• Authorized to work in the US. CPT and OPT candidates are welcome to apply.
• Currently enrolled in a bachelor's or master's program, graduating 2026, 2027 or 2028.
• Willing to complete a basic background check before access is granted.
• Available 30 to 40 hours a week for 6 months.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.

6 months, starting Dec 2026. Stipend: $44.00 - $56.00 an hour.

Perks: Mentorship from a dedicated buddy and manager, Paid sick time, Return offer opportunities, Intern events and speaker sessions (virtual).

Applications are reviewed as they come in.

Duration: 6 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Brickset.