IT Cybersecurity Co-op (Spring 2027)

Scorpion Therapeutics; United States; On-site; USD 30,000 - 39,000; Full time

Job summary

Scorpion Therapeutics is offering a six-month full-time Cybersecurity Co-op on the IT Security team. You will monitor alerts from CrowdStrike, investigate incidents, and contribute to root-cause analyses.

You will learn triage, document findings, and help with vulnerability scans across endpoints, servers, cloud, and network infrastructure. You’ll track remediation efforts with IT operations and participate in Zero Trust projects, RBAC reviews, and identity governance workstreams.

Qualifications

• Enrolled in a Computer Science (or related) bachelor’s program at an accredited university.
• GPA of 3.0+ preferred.
• Strong Windows OS background and basic security tooling knowledge.
• Excellent written and verbal communication; teamwork oriented.

Responsibilities

• Support the SOC by monitoring alerts from CrowdStrike and other platforms.
• Investigate suspicious activity and escalate incidents per playbooks.
• Learn triage and enrichment of security events and document findings.
• Assist with vulnerability scans across endpoints, servers and cloud.

Skills

Windows OS

Communication skills

Team collaboration

Incident response

Education

Pursuing Bachelor's in Computer Science

GPA 3.0+ preferred

Job description

Six-month full-time Cybersecurity Co-op (IT Security team).

Responsibilities

• Support the Security Operations Center (SOC) by monitoring alerts from CrowdStrike and other security platforms, investigating suspicious activity, and escalating incidents following defined playbooks.
• Learn initial triage and enrichment of security events, document findings, and contribute to root-cause analyses.
• Identify security tool integration/ingestion points to improve telemetry and automation within CrowdStrike and related systems.
• Assist in scheduling, running, and reviewing vulnerability scans across endpoints, servers, cloud environments, and network infrastructure.
• Track remediation efforts with IT operations teams to ensure timely patching and fixes.
• Maintain reporting dashboards on remediation progress, trends, and compliance against defined SLAs.
• Participate in Zero Trust projects, including passwordless authentication and biometric access controls.
• Assist in reviewing RBAC configurations to ensure least-privilege.
• Contribute to documentation/testing for identity governance initiatives (access recertification, MFA expansion).
• Support third-party risk assessments (documentation review, security questionnaires, vendor posture scoring).
• Maintain third-party risk registers and track remediation action items.
• Support cyber-AI risk assessments for open-source ML tools and LLM integrations.
• Document risks (data privacy, model security, supply-chain).
• Assist with policy/compliance updates, WISP documentation, and ISO 27001/NIST CSF evidence collection.
• Assist in phishing simulations and security awareness campaigns; deliver training and improve modules.

Qualifications / Skills

• Enrolled in a Computer Science (or related) bachelor’s program at an accredited university.
• GPA of 3.0+ preferred.
• Strong Windows OS background.
• Strong written and verbal communication skills.
• Well-organized; able to work in a team environment.
• Able to manage responsibilities in a fast-paced environment.
• Ability to respond quickly to incidents; complete routine tasks independently over time.