Security Intern, Threat Operations

Job not on LinkedIn

🔥 1 minute ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

👨‍🎓 Internship

⚪️ Entry-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

1Password

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2009

🔒 Cybersecurity

☁️ SaaS

⚡ Productivity

💰 $620M Series C on 2022-01

Cybersecurity • SaaS • Productivity

1Password is a leading password management and cybersecurity company that offers solutions for both individual and business customers to securely store and manage passwords, secrets, and sensitive information. With features like extended access management (XAM), 1Password empowers users to manage access to every application and web account, ensuring security across all devices with alerts for possible breaches. Trusted by over 150,000 businesses, 1Password provides comprehensive security solutions that enhance productivity by enabling easy and secure sharing of credentials and managing permissions, while maintaining high visibility and control. Their services cater to enterprises and families, providing protection from bad actors in today's SaaS-centric hybrid work environment.

📋 Description

• Analyze incoming threat intelligence, assess credibility and relevance to 1Password, and run IOC sweeps across the environment • Own work across the threat management lifecycle and turn intelligence into recommendations for detection, incident response, and vulnerability management • Join the alert triage rotation and learn how signal quality, enrichment, and response fit together • Develop and test detection rules and response agents • Contribute to detection-as-code and response-as-code platforms • Build orchestration workflows to automate triage, enrichment, and response using AI tools • Work across Cyber Threat Intelligence, Detection Engineering, and Security Incident Response teams

🎯 Requirements

• Willingness to take on new challenges and see them through to completion • Willingness to ask questions and learn from mistakes • Curiosity and interest in improving processes • Teamwork • Legally authorized to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship provided • Must be currently enrolled at an educational institution • Anticipated graduation date required • Familiarity with Git and managing infrastructure or detections as code, including Terraform • Scripting or programming experience, such as Python or Go, and comfort working with APIs • Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries through coursework, labs, or projects • Experience using AI tools to build or automate workflows, with healthy skepticism about their output • Familiarity with MITRE ATT&CK, security coursework, CTFs, home labs, or a security club • Successful applicants must complete a background check

🏖️ Benefits

• Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) • Company-wide wellness days (1 per quarter) • Employee-led inclusion and belonging programs and ERGs • Remote-first environment • Peer-to-peer recognition through Bonusly • 1Password University access and learning sessions • Monthly internship events and socials • Travel for in-person engagement, including annual department-wide offsites, team meetings, and customer/industry events