Security Engineering Intern - Spring 2027

About San Jose InfoSec

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

The internship

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. You can work from home anywhere in the US. We have no office requirement. Clear written English is a must, as the team works across time zones.

Responsibilities

• Check AWS and Google Workspace settings against CIS benchmarks.
• Track open vulnerabilities in Jira and follow up with owners on fixes.
• Research new CVEs that affect our stack and summarise them for the team.
• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Monitor dependency alerts from Dependabot and Snyk.
• Update security policies and runbooks in Confluence.
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.
• Triage phishing emails reported by staff and update block lists.

Requirements

• Based in the US for the duration of the internship.
• Authorized to work in the US. CPT and OPT candidates are welcome to apply.
• Available 40 hours a week for the full internship.
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2028.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.
• Comfortable on the Linux command line.

Bonus points

• Experience with Wireshark, Nmap or Burp Suite.
• CTF participation or published writeups.
• Knowledge of cloud security in AWS or Azure.

What you get out of it

• Certificate and recommendation letter on completion.
• How audit evidence, policies and technical controls fit together.

Duration: 4 months

Start date: Spring 2027

Stipend: $41.50-$53.50/hr

Perks

• Paid sick time.
• Final presentation to leadership.
• Learning and development stipend.
• Home office setup stipend.

Duration: 4 months. Start: Spring 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Jose InfoSec.