Security Operations Intern

About the role

We are replacing our commercial third‑party security awareness training vendor with an in‑house platform. This internship sits at the intersection of security operations and software delivery. You will own the security awareness training program end‑to‑end, from curriculum design to platform implementation and operational management.

Key responsibilities

• Design and author the security awareness training curriculum, including modules and quiz banks covering phishing, password hygiene, data handling, secure remote work, and Web3‑specific threats.
• Map each training module to compliance requirements (SOC 2, ISO 27001) to provide audit‑ready evidence.
• Operate the program day‑to‑day: enroll employees, configure deadlines, monitor completion rates, and follow up with the People team.
• Produce audit‑ready reporting, including completion evidence exports and on‑chain verification links.
• Document runbooks for onboarding, module addition, renewal campaigns, and audit evidence collection.
• Implement the delivery platform according to detailed specifications: Solidity contracts for completion tracking, Express/TypeScript/PostgreSQL backend, and React frontend.
• Test and harden the solution with contract tests, backend integration tests, and security‑audit checks, ensuring zero critical/high findings before deployment.
• Deploy the platform and provide ongoing support.

Required profile

• Final‑year student or recent graduate in Information Security, Computer Science, or a related field (or equivalent practical experience).
• Solid understanding of common attack vectors such as phishing, social engineering, credential theft, and basic OWASP Top 10 concepts.
• Genuine interest in security awareness and measuring behavior change rather than just checkbox compliance.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.
• Programming ability in TypeScript/JavaScript (Node.js, REST APIs, basic SQL, basic React) sufficient to implement from a detailed specification.
• Strong written communication skills for authoring training content and audit documentation.
• Interest in Web3 security, wallet threats, and willingness to learn Solidity basics quickly.
• Understanding of Git workflows, including branching, pull requests, and code review.

Required skills

• Solidity
• TypeScript
• JavaScript
• Node.js
• Express
• PostgreSQL
• React
• REST APIs
• Git