Application Security Intern

About Garcia Secure

Government agencies and defense contractors make up a large share of revenue, and many roles require a clearance. Products include endpoint protection, email security and a cloud posture management platform. Background checks are required, and some client work requires a government clearance.

About the role

Remote internship on the Security Operations team. You will work on our own systems only, with written permission and a clear scope for any testing. You can work from home anywhere in the US. We have no office requirement. Most of our work is async, and meetings are kept short. Most communication happens in Slack, with short video calls when needed.

Responsibilities

• Track open vulnerabilities in Jira and follow up with owners on fixes.
• Monitor dependency alerts from Dependabot and Snyk.
• Research new CVEs that affect our stack and summarise them for the team.
• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Check AWS and Google Workspace settings against CIS benchmarks.
• Prepare short security awareness posts and quizzes for staff.
• Help review access lists and remove accounts that are no longer needed.

Requirements

• Available 40 hours a week for the full internship.
• Based in the US for the duration of the internship.
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF.
• Own laptop that can run a virtual machine, and a stable internet connection.
• Willing to complete a basic background check before access is granted.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.
• Hands-on practice through TryHackMe, Hack The Box or college labs.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.

What you get out of it

• How audit evidence, policies and technical controls fit together.
• Writing findings that engineers can fix without a long back-and-forth.
• Mentoring from a security engineer with weekly check-ins.

Duration: 5 months

Start date: Immediately

Stipend: $46.00 - $47.50 per hour

What we offer

• Company laptop.
• Return offer opportunities.
• Flexible hours.
• Learning and development stipend.

We are unable to sponsor visas for this position.

Duration: 5 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Garcia Secure.