Security Analyst Intern

WHO WE ARE:

Consultants are staffed across industries early on, then specialize after a few years. Engagement teams range from three people to more than 200 on multi-year transformation programs. Training starts with a two-week bootcamp, then continues on the job.

THE INTERNSHIP:

We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. Remote position. Most of the team is in Toronto, but nobody is required to come in. We use Slack, Notion and Google Meet. Cameras on for team calls.

WHAT YOU'LL DO:

• Track open vulnerabilities in Jira and follow up with owners on fixes
• Triage phishing emails reported by staff and update block lists
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Prepare short security awareness posts and quizzes for staff

REQUIREMENTS:

• Based in Canada for the duration of the internship
• Available for the full internship period
• Eligible to work in Canada
• Comfortable on the Linux command line
• Some scripting in Python or Bash
• Own laptop that can run a virtual machine, and a stable internet connection

WHAT YOU GET OUT OF IT:

• Certificate and recommendation letter on completion
• You will work on real security alerts and vulnerability findings, not lab exercises
• How audit evidence, policies and technical controls fit together

Duration: 6 months

Start date: Immediately

Stipend: $25.50 - $29.50/hr

PERKS:

• Paid sick time
• Intern events and speaker sessions (virtual)
• Mentorship from a dedicated buddy and manager
• Learning and development stipend

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at JF Advisors.