Information Security Intern

About us

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

Overview

Remote internship on the Cloud Security team. You will work on our own systems only, with written permission and a clear scope for any testing. Remote within the US. The team meets in San Jose once a quarter, travel covered. Normal working hours, Monday to Friday. Communication happens mostly in Slack and short video calls.

Responsibilities

• Collect evidence for ISO 27001 and SOC 2 audit controls
• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Research new CVEs that affect our stack and summarise them for the team
• Help review access lists and remove accounts that are no longer needed
• Update security policies and runbooks in Confluence
• Track open vulnerabilities in Jira and follow up with owners on fixes

Requirements

• Available 40 hours a week for the full internship
• Currently enrolled in a bachelor's or master's program, graduating 2027
• Based in the US for the duration of the internship
• Authorized to work in the US. CPT and OPT candidates are welcome to apply
• Some scripting in Python or Bash
• Hands-on practice through TryHackMe, Hack The Box or college labs
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2027
• Own laptop that can run a virtual machine, and a stable internet connection
• Comfortable on the Linux command line
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls

Nice to have

• CTF participation or published writeups
• CompTIA Security+, CEH, eJPT or a similar certification
• Familiarity with ISO 27001 or NIST frameworks

What you'll learn

• Hands-on time with SIEM, scanning and cloud security tools
• You will work on real security alerts and vulnerability findings, not lab exercises
• Writing findings that engineers can fix without a long back-and-forth
• Certificate and recommendation letter on completion

Duration: 3 months

Start date: Dec 2026

Stipend: $42.50 - $57.50/hr

Perks

• Learning and development stipend
• Company laptop
• Paid company holidays
• Return offer opportunities
• Home office setup stipend
• Flexible hours

Duration: 3 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Jose InfoSec.