Security Analyst Intern

About San Jose InfoSec:

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

About the role:

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. Remote position. Most of the team is in San Jose, but nobody is required to come in. Standard office hours, Monday to Friday, with flexibility around them.

Responsibilities:

Research new CVEs that affect our stack and summarise them for the team. Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious. Monitor dependency alerts from Dependabot and Snyk. Write clear findings with severity, impact and steps to fix. Track open vulnerabilities in Jira and follow up with owners on fixes. Update security policies and runbooks in Confluence.

Requirements:

Based in the US for the duration of the internship. Authorized to work in the US. CPT and OPT candidates are welcome to apply. Available 40 hours a week for the full internship. Currently enrolled in a bachelor's or master's program, graduating between December 2027 and June 2028. Some scripting in Python or Bash. Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in between December 2027 and June 2028. Basic knowledge of common web attacks such as XSS, SQL injection and CSRF. Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls. Hands-on practice through TryHackMe, Hack The Box or college labs.

Bonus points:

CTF participation or published writeups. Experience with Wireshark, Nmap or Burp Suite.

Duration: 6 months

Start date: Mar 2027

Stipend: $49.50 - $51.50 per hour

What we offer:

Learning and development stipend. Home office setup stipend. Company laptop. Mentorship from a dedicated buddy and manager. Paid sick time.

Duration: 6 months. Start: Mar 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Jose InfoSec.