Information Security Intern

About San Jose InfoSec:

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

Overview:

We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. Remote within the US. The team meets in San Jose once a quarter, travel covered. We do not have many meetings. Most updates happen in writing. Please make sure you have a quiet place to work and a solid internet connection.

Day to day:

• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope.
• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Update security policies and runbooks in Confluence.
• Check AWS and Google Workspace settings against CIS benchmarks.
• Track open vulnerabilities in Jira and follow up with owners on fixes.
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious.
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.

Requirements:

• Based in the US for the duration of the internship.
• Currently enrolled in a bachelor's or master's program, graduating 2028.
• Available 40 hours a week for the full internship.
• Authorized to work in the US. CPT and OPT candidates are welcome to apply.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF.
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2028.

What you'll learn:

• You will work on real security alerts and vulnerability findings, not lab exercises.
• How audit evidence, policies and technical controls fit together.
• Certificate and recommendation letter on completion.
• Hands-on time with SIEM, scanning and cloud security tools.

Duration: 12 weeks

Start date: Spring 2027

Stipend: $45.00 - $45.50 per hour

Perks:

• Company laptop.
• Paid sick time.
• Home office setup stipend.
• Intern events and speaker sessions (virtual)
• Mentorship from a dedicated buddy and manager.
• Flexible hours.

We are not working with agencies on this role.

Duration: 12 weeks. Start: Spring 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Jose InfoSec.