Security Analyst Intern

ABOUT CARTER THREAT LABS

Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. Based in New York City, Carter Threat Labs also trains client staff and runs simulated phishing campaigns.

OVERVIEW

Carter Threat Labs is looking for a cyber security intern to support our small security team with monitoring, testing and documentation. Fully remote. You can work from anywhere in the US.

RESPONSIBILITIES

Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets. Monitor dependency alerts from Dependabot and Snyk. Track open vulnerabilities in Jira and follow up with owners on fixes. Triage phishing emails reported by staff and update block lists. Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious. Research new CVEs that affect our stack and summarise them for the team. Prepare short security awareness posts and quizzes for staff. Help review access lists and remove accounts that are no longer needed.

REQUIREMENTS

Available 40 hours a week for the full internship. Currently enrolled in a bachelor's or master's program, graduating 2026 or 2027. Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2026 or 2027. Willing to complete a basic background check before access is granted. Own laptop that can run a virtual machine, and a stable internet connection.

BONUS POINTS

Basic understanding of Active Directory.

Duration: 6 months

Start date: Immediately

Stipend: $40.00 to $53.00/hr

PERKS

Paid sick time. Flexible hours. Learning and development stipend.

No recruitment agencies, please.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Carter Threat Labs.