Threat Operations Security Intern (Remote)

First Roles; United States; Remote; USD 25,000 - 30,000; Part time

Job summary

1Password is seeking a Security Intern for Threat Operations. The role focuses on analyzing threat intelligence, turning intel into detections, and contributing to detection-as-code and automation efforts in a remote internship from January to April 2027.

You will work across Threat Intelligence, Detection Engineering, and Incident Response, gaining hands-on experience with AI-assisted workflows and security tooling in a fast-paced environment.

Qualifications

• Pursuing cybersecurity or related field, or equivalent.
• Strong communication skills (written and verbal).
• Willingness to learn and take on new challenges.

Responsibilities

• Analyze incoming threat intelligence and assist in detection design.
• Join alert triage rotation and support incident response.
• Develop and test detection rules and automate response workflows.
• Collaborate across Threat Intelligence, Detection Engineering, and Incident Response teams.

Skills

Confidence

Humility

Curiosity

Teamwork

Adaptability

Problem-solving

Git

Terraform

Python

Go

APIs

SIEM

SOAR

MITRE ATT&CK

AI tools

CTFs/Home labs

Tools

Git

Terraform

Python

Go

APIs

SIEM

SOAR

MITRE ATT&CK

Job description

1Password is seeking a Security Intern for Threat Operations. The role focuses on analyzing threat intelligence, turning intel into detections, and contributing to detection-as-code and automation efforts in a remote internship from January to April 2027.

You will work across Threat Intelligence, Detection Engineering, and Incident Response, gaining hands-on experience with AI-assisted workflows and security tooling in a fast-paced environment.