Remote Threat Operations Intern: AI-Driven Defense

1Password LLC; Oregon; Hybrid; USD 25,000 - 39,000; Full time

Benefits offered by this job

Generous PTO

Wellness days

Remote-first environment

Learning sessions

Internship events

Job summary

1Password LLC is seeking a Threat Operations Intern to contribute to the security program. You will analyze threat intelligence, develop detections, and participate in incident response while working across cyber threat intelligence, detection engineering, and security operations in a remote, 4-month term.

You’ll gain hands-on experience with detection-as-code, AI-enabled automation, and cross-team collaboration within a fast-paced security environment.

Qualifications

• Willingness to take on new challenges and see them through to completion.
• Curiosity to improve methods and processes beyond the status quo.
• Ability to work effectively as part of a team and collaborate across functions.
• Interest in threat intelligence, detection engineering, and incident response workflows.

Responsibilities

• Analyze incoming threat intelligence for credibility and relevance to 1Password.
• Own pieces of threat management lifecycle work and translate intel into detection and response guidance.
• Join alert triage rotation to understand signal quality and enrichment needs.
• Develop and test detection rules and response agents; contribute to detection-as-code platforms.
• Build orchestration workflows to automate triage, enrichment, and response using AI tools.

Skills

Confidence

Humility

Curiosity

Teamwork

Tools

Git

Terraform

Python

Go

APIs

SIEM

SOAR

AI tools

MITRE ATT&CK

Job description

1Password LLC is seeking a Threat Operations Intern to contribute to the security program. You will analyze threat intelligence, develop detections, and participate in incident response while working across cyber threat intelligence, detection engineering, and security operations in a remote, 4-month term.

You’ll gain hands-on experience with detection-as-code, AI-enabled automation, and cross-team collaboration within a fast-paced security environment.