Security Intern, Threat Operations

📋 Description

• Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run
• Own pieces of work across the threat management lifecycle, turning intel into recommendations for
• Join the alert triage rotation and learn how signal quality, enrichment, and response fit together.
• Develop and test detection rules and response agents, and contribute to our detection-as-code and
• Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help

🎯 Requirements

• Confidence: A willingness to take on new challenges, and see them through to completion.
• Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from
• Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are.
• Teamwork: We work together, and succeed as a team!
• Familiarity with Git and managing infrastructure or detections as code, including Terraform.
• Scripting or programming experience, such as Python or Go, and comfort working with APIs.

🎁 Benefits

• Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term)
• Company-wide wellness days (1 per quarter)
• Employee-led inclusion and belonging programs and ERGs
• Remote-first environment
• Peer-to-peer recognition through Bonusly
• 1Password University access and learning sessions