Security Analyst Internship New

OpenSesame; California; Remote; USD 12,000 - 14,000; Full time

Job summary

OpenSesame seeks a Security Analyst Intern to work remotely for 20 weeks, 32–40 hours/week, starting Nov 17, 2026 and ending Apr 9, 2027. You'll tackle real cybersecurity challenges, support audits, and help strengthen compliance using AI-enabled workflows.

You'll gain hands-on exposure to AWS security operations, vulnerability tracking, and security tooling in a fast‑paced, growth‑oriented environment. This paid internship requires current enrollment or recent graduation within 12 months.

Qualifications

• Must be a current student or recent graduate within 12 months.
• Interest in security and compliance with hands‑on project experience.
• Ability to work independently and collaborate across teams.

Responsibilities

• Take ownership of security projects and contribute to deliverables.
• Assist in analyzing vulnerability findings and remediation.
• Support phishing simulations and email security initiatives.
• Develop workflow automations for GRC and security operations.
• Collect and review audit evidence in Drata for audits.

Skills

GRC tools

CrowdStrike

Claude AI

Jira

Confluence

Security auditing

Education

Currently enrolled in college/university

Graduated within past 12 months

Tools

Drata

CrowdStrike

AWS

Job description

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world's most productive and admired workforces.
Learn more: www.opensesame.com/about

Internship Overview

OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands‑on experience in a fast‑paced, growth‑focused environment.

As a Security Analyst Intern, you’ll work on real‑world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

2 Weeks

• Gain hands‑on experience with GRC compliance tools such as Drata and security tools such as Crowdstrike.
• Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
• Shadow team members to understand security and compliance workflows.
• Become familiar with JIRA, Confluence, and other project management tools for tracking compliance‑related tasks and projects.

30 Days

• Assist in collecting and reviewing technical security evidence for audits and tracking.
• Support security initiatives, including phishing simulations, email security, and pen‑testing programs.
• Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
• Propose and develop workflow automations to streamline GRC and security operations.

60 Days

• Take ownership of assigned security projects, contributing independently to deliverables.
• Become comfortable owning several audit evidence collection tasks in Drata.
• Assist in analyzing vulnerability findings and tracking remediation efforts.
• Gain hands‑on familiarity with AWS cloud security operations and vulnerability assessments.
• Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)

Application Closes:

• Friday, October 23, 2026

Program Dates:

• Projected Start Date: Tuesday, November 17, 2026
• Projected End Date: Friday, April 9, 2027

Commitment:

• Full-time (32 to 40 hours/week) for 20 weeks
• Must commit to working regular office hours in the US continental time zones (e.g. from 9 AM EST to 5 PM EST or 9 AM PST to 5 PM PST within Monday to Friday period

Compensation:

• Standard: $18/hour

Fully Remote Role: Interns must have access to a reliable, high‑speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.

We use AI. For real.Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. You'll build fluency that most companies are still talking about adopting, with hands‑on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesn't replace them. The skills you build here travel with you.

Location: This position can be based anywhere in the U.S.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment‑related purposes. We may share this information with third‑party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General's website.

We Care About Your Security:We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at [e-mail]. Your security matters to us, thank you for staying vigilant.