Security Analyst Internship

About the Role

OpenSesame is seeking passionate, driven students for a paid summer internship program. This is an opportunity to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment. As a Security Analyst Intern, you will work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

The Security and Compliance Team ensures OpenSesame meets the highest industry standards and regulatory requirements. The team focuses on compliance with ISO 27001, SOC 2, GDPR, ISO 42001, and other security frameworks, vendor risk assessments, incident response, and policy enforcement. The team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture.

Key Responsibilities

• Gain hands-on experience with GRC compliance tools such as Drata and security tools such as Crowdstrike.
• Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
• Shadow team members to understand security and compliance workflows.
• Become familiar with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.
• Assist in collecting and reviewing technical security evidence for audits and tracking.
• Support security initiatives, including phishing simulations, email security, and pen-testing programs.
• Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
• Propose and develop workflow automations to streamline GRC and security operations.
• Take ownership of assigned security projects, contributing independently to deliverables.
• Become comfortable owning several audit evidence collection tasks in Drata.
• Assist in analyzing vulnerability findings and tracking remediation efforts.
• Gain hands-on familiarity with AWS cloud security operations and vulnerability assessments.

Requirements & Tech Stack

• Experience with GRC compliance tools (e.g., Drata)
• Experience with security tools (e.g., Crowdstrike)
• Familiarity with Claude and AI features
• Familiarity with project management tools such as JIRA and Confluence
• Familiarity with SAST tooling
• Familiarity with AWS cloud security operations

Qualifications

• Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)
• Ability to commit to working regular office hours in the US continental time zones (Monday to Friday)
• Must have access to a reliable, high-speed internet connection for a fully remote role.

Program Details

• Compensation: $18/hour
• Commitment: Full-time (32 to 40 hours/week) for 20 weeks
• Location: Anywhere in the U.S. (Fully Remote)
• Laptop: Company laptop will be provided.