Security Engineering Intern

Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. Based in New York City, Carter Threat Labs also trains client staff and runs simulated phishing campaigns.

About the role:

Carter Threat Labs is looking for a cyber security intern to support our small security team with monitoring, testing and documentation. You can work from home anywhere in the US. We have no office requirement. We use Slack, Notion and Google Meet. Cameras on for team calls.

Day to day:

• Monitor dependency alerts from Dependabot and Snyk.
• Prepare short security awareness posts and quizzes for staff.
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.
• Help review access lists and remove accounts that are no longer needed.
• Write clear findings with severity, impact and steps to fix.
• Update security policies and runbooks in Confluence.
• Track open vulnerabilities in Jira and follow up with owners on fixes.

What we're looking for:

• Based in the US for the duration of the internship.
• Available 40 hours a week for the full internship.
• Authorized to work in the US. CPT and OPT candidates are welcome to apply.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.
• Comfortable on the Linux command line.

Bonus points:

• Familiarity with ISO 27001 or NIST frameworks.
• Basic understanding of Active Directory.

What you'll learn:

• You will work on real security alerts and vulnerability findings, not lab exercises.
• Mentoring from a security engineer with weekly check-ins.
• Hands-on time with SIEM, scanning and cloud security tools.

Duration: 6 months

Start date: Mar 2027

Stipend: $40.00-$50.00 per hour

Perks:

• Flexible hours.
• Company laptop.
• Final presentation to leadership.
• Return offer opportunities.
• Intern events and speaker sessions (virtual)
• Home office setup stipend.

Applications are reviewed as they come in.

Duration: 6 months. Start: Mar 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Carter Threat Labs.