Security Analyst Intern

Who we are:

We are 29 people, all hands-on, and the founders still run engagements themselves. Since 2024, growth has come by referral, mostly from auditors and insurance brokers. We write internal post-mortems after every major engagement, including what went wrong.

About the role:

Remote internship on the Cloud Security team. You will work on our own systems only, with written permission and a clear scope for any testing. Our headquarters is in Utrecht, and about a third of the team works remotely from other countries. The internship is fully remote. Interns join our Utrecht team on daily calls and get a named mentor. Working hours overlap with Central European Time. A quiet workspace and good internet are required.

Responsibilities:

• Monitor dependency alerts from Dependabot and Snyk
• Help review access lists and remove accounts that are no longer needed
• Update security policies and runbooks in Confluence
• Collect evidence for ISO 27001 and SOC 2 audit controls
• Write clear findings with severity, impact and steps to fix

What we're looking for:

• Currently enrolled in a bachelor's or master's program, graduating 2027 or 2028
• Available 40 hours a week for the full internship
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls
• Willing to complete a basic background check before access is granted

Bonus points:

• CTF participation or published writeups

Duration: 4 months

Start date: Jan 2027

Stipend: $37.00 - $51.50 per hour

What we offer:

• Company laptop
• Paid sick time
• Mentorship from a dedicated buddy and manager
• Return offer opportunities

Duration: 4 months. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Sandpiperwell Cybersecurity B.V..