Information Security Intern (f/m/d) - ID:2758682

Prewave; Wien; Hybrid; EUR 14.000 - 17.000; Vollzeit

Benefits dieser Stelle

Hybrid working

Birthday off

MyClubs partnership

Mental health support

Health check-ups

Company-wide training

Team events

Device of choice

Work from anywhere (up to 8 weeks/year

Zusammenfassung

Prewave is seeking an Information Security Intern to automate security workflows and build AI-powered tooling within a fast-moving team. You’ll work across IT, Engineering and Operations to streamline detections, incident responses and reporting.

You will ship end-to-end security projects, demonstrate practical impact, and learn detection and threat hunting from insiders while enjoying hybrid working and strong learning opportunities.

Qualifikationen

• Hands-on experience shipping projects with AI coding assistants and workflow automation platforms.
• Interest in how attackers operate and how defenders respond, able to translate between technical and non-technical stakeholders.
• Proven ability to ship working prototypes quickly and describe improvements.

Aufgaben

• Automate security workflows and ship detection logic end-to-end.
• Build AI agents and integrations to streamline security processes.
• Own internal security tooling and dashboards from spec to deployment.
• Integrate SIEM/EDR/tools via APIs to automate data flows.

Kenntnisse

AI-native builder

Security-curious

Delivery mindset

Ausbildung

Pursuing Computer Science/IS degree

Tools

Claude

Cursor

n8n

Zapier

Jobbeschreibung

Most companies find out about supplier insolvencies, cyber attacks, factory fires or floods that affect their supply chain when it's already a crisis. Prewave exists to change that. We're an AI-native company giving BMW Group, Hilti and Lufthansa real-time visibility into supply chain risks before they become headlines.

We're looking for an Information Security Intern who takes ownership of building things that are actually used and automating what slows down a modern security team from day one. Someone who uses AI as a default part of how they work - and knows when to trust their own judgment.

What you'll own

You'll sit inside our Security function and work across IT, Engineering and Operations, automating the manual work that slows a modern security team down. That means shipping detection logic, AI agents and integrations that turn noisy, copy-paste security workflows into clean, reliable pipelines. You will work on:

• SecOps automation at the core: Eliminate recurring manual work like alert triage, log enrichment, phishing analysis, access reviews and vulnerability tracking, so analysts spend their time on real threats, not busywork.
• AI agents with real impact: Build end-to-end agents that handle repetitive security tasks, from pulling and correlating signals across tools, to enriching indicators of compromise, to drafting incident summaries and firing Slack or email notifications.
• Internal security tooling you own: Spec, build and deploy lightweight dashboards and tools that replace fragmented spreadsheets and manual tracking for detections, vulnerabilities and audit evidence, start to finish.
• Integrations that stick: Connect SIEM, EDR, vulnerability scanners, identity providers and ticketing systems via APIs so security data flows automatically, with no manual handoffs.
• Direct stakeholder partnership: Work alongside IT, Engineering and Operations to scope real risks, prototype fast, and measure alerts resolved and hours saved. You own outcomes, not just tickets.

What we are looking for

You are the right fit if you have:

• AI-native builder: Hands-on experience shipping projects with AI coding assistants (Cursor, Claude Code, or similar) and at least one workflow automation platform (n8n, Zapier, or Make). Familiarity with MCP servers or agent frameworks is a strong plus.
• Security-curious: Genuinely interested in how attackers operate and how defenders respond, and able to translate fluently between technical and non-technical stakeholders. Prior professional security experience is not required, but you should be excited to learn detection, incident response and threat hunting from the inside.
• Delivery mindset: A track record of shipping secure working v1s in days, not perfect v3s in quarters. Be ready to share two or three projects you built end-to-end and walk us through what you'd do differently.

Nice to have:

• Exposure to EDR or SIEM tooling (e.g. CrowdStrike Falcon), or to running detections and hunting queries.
• Experience with security or IT workflows: vulnerability management, identity and access, incident response, or compliance evidence for frameworks like SOC 2, ISO 27001 or GDPR.
• A Capture-the-Flag background, home lab, or any hands-on tinkering with security tools.

What's our working style

We're a resilient AI-native team building an AI-native resilience product - and we hire for both. For us, AI-native has always meant humans and AI working together, not one replacing the other. We use tools like Claude, Gemini, Cursor as a normal part of the job, to think faster, work smarter and spend less time on the repetitive stuff. We treat AI fluency as a skill like any other - something you build, experiment with and keep developing.

What goes with that is real ownership. You'll have the space and the trust to figure things out your way - with a strong team around you and plenty of support when you need it. Things move fast here and the brief won't always be complete, but that's what makes the work interesting.

The people who do best at Prewave are curious by default, go after things rather than wait to be handed them, and don't lose their footing when the plan changes.

We score six values in every interview - creating positive impact, optimising for customer value, being an ambitious innovator, operating with urgency, doing things that make sense and collaborating with kindness - so you always know what we're looking for and can prepare accordingly.

The Package

Minimum EUR 1,400 gross monthly, on full-time basis and prorated to the weekly hours in part-time. Flexible hours and hybrid working.

Your birthday off. MyClubs partnership. Mental health support. Regular health check-ups and initiatives. Company-wide training. Fun team events. Device of choice. Work from anywhere - up to 8 weeks a year.