Security roles where proof beats polish.

12-week summer internship owning a scoped security engineering project at Atlassian's Seattle or San Francisco hub.

Mentored summer internship supporting a trading firm's day-to-day security operations in London.

Summer internship on Robinhood's offensive security team attacking AI, cloud and smart-contract targets.

Fully remote Australian SOC analyst handling EDR/SIEM alerts and forensic investigations, on business-hours shifts.

Hybrid IAM engineer in Austin building SSO, governance and privileged access controls at Cloudflare.

Remote incident responder in Australia covering GitLab's 24/7 SIRT on a compressed four-day schedule.

6-month internship or 12-month industrial placement in QRT's security team in London or Paris, starting 2027.

On-site night-shift SOC analyst in Leesburg, VA, monitoring and escalating security events; Secret clearance required.

Junior GRC-focused security role handling compliance, security questionnaires and vulnerability remediation tracking.

Remote role in Argentina combining IAM, compliance, security tooling and incident response for a global insurer.

Remote, part-time paid internship (Jan–Apr 2027) inside GuidePoint's early-career GPSU program.

Remote-first senior analyst in Canada investigating attacks and cyber-insurance incidents to find root cause.

3–6 month security engineering internship starting in 2027 at a quantitative investment firm in Asia.

Senior product security engineer in Spain securing Wiz's cloud products and Kubernetes infrastructure.

Assess incoming vulnerability reports, confirm them and prepare them for the engineering team.

A paid six-month introduction to professional security work, with an assigned mentor.

Secure cloud infrastructure: permissions, network boundaries and configuration.

Simulate real attacks against the company to test how well the defenders detect and respond.

Monitor security alerts and decide which ones are real incidents.

Investigate active security incidents: determine what happened, contain it and document it.

Review code and designs for security issues, and build the tooling that catches them automatically.

Test web applications and networks for security flaws, and document what you find.

Assess the security of Android and iOS applications and the services behind them.

Find previously unknown vulnerabilities in widely used software.

Write and maintain the rules that identify attacks in security monitoring data.

A paid six-month introduction to professional security work, with an assigned mentor.

Secure cloud infrastructure: permissions, network boundaries and configuration.

Lead a small security team: set priorities, develop the people, stay involved in the work.

Review code and designs for security issues, and build the tooling that catches them automatically.

Test web applications and networks for security flaws, and document what you find.

Monitor security alerts and decide which ones are real incidents.

Investigate active security incidents: determine what happened, contain it and document it.

Assess incoming vulnerability reports, confirm them and prepare them for the engineering team.

Assess the security of Android and iOS applications and the services behind them.

Find previously unknown vulnerabilities in widely used software.

Simulate real attacks against the company to test how well the defenders detect and respond.

Write and maintain the rules that identify attacks in security monitoring data.

A paid six-month introduction to professional security work, with an assigned mentor.

Secure cloud infrastructure: permissions, network boundaries and configuration.

Review code and designs for security issues, and build the tooling that catches them automatically.

Test web applications and networks for security flaws, and document what you find.

Monitor security alerts and decide which ones are real incidents.

Lead a small security team: set priorities, develop the people, stay involved in the work.

Investigate active security incidents: determine what happened, contain it and document it.

Assess the security of Android and iOS applications and the services behind them.

Assess incoming vulnerability reports, confirm them and prepare them for the engineering team.

Write and maintain the rules that identify attacks in security monitoring data.

Find previously unknown vulnerabilities in widely used software.

Simulate real attacks against the company to test how well the defenders detect and respond.

Secure cloud infrastructure: permissions, network boundaries and configuration.

Review code and designs for security issues, and build the tooling that catches them automatically.

Test web applications and networks for security flaws, and document what you find.

Monitor security alerts and decide which ones are real incidents.

A paid six-month introduction to professional security work, with an assigned mentor.

Assess mission systems on site, with the tooling built in-house.

Secure the system that runs the whole business, not the one on the perimeter.

Build and review identity controls for US clients from a Buenos Aires team.

Run vulnerability management on a cloud platform serving Brazilian enterprises.

Join with fundamentals, get trained on the platform, work fully remote.

Harden a cloud-native insurance platform and automate the boring half.

Secure control systems where a reboot is not an option.

Break embedded products in a lab so they can be certified honestly.

First line on the alert queue, with a path into detection engineering.

Review code and pipelines so defects are caught before they reach production.

Advise European mid-market companies and help them when something actually happens.

Secure card issuance and payment flows where a bug is measured in money.

Help keep a privacy-first data platform honest about its own guarantees.

Triage real detections across customer fleets and decide what is actually an intrusion.

Own the web attack surface of a platform with hundreds of millions of users.

Deliver penetration tests for APAC clients backed by a product security research team.

Offensive engagements across web, network and cloud for international clients.

Pentests and red team work for German mid-market clients, with a mentor on every engagement.

Test SaaS products end to end and write reports developers actually act on.

Run assessments against federal networks and write the findings up so they can be fixed.

Fully remote UK analyst in Huntress's 24/7 SOC investigating endpoint, identity and cloud threats.

Remote US AppSec engineer focused on threat modeling and securing AI-powered product features.

On-site spring internship supporting security operations and compliance evidence at a space company.

Hybrid role in Spain securing dLocal's cloud networking and edge (WAF, firewalls, VPN) for a global payments platform.

Fully remote junior analyst monitoring customer infrastructure and responding to alerts in a secure NOC.

Junior analyst supporting security assessments and compliance for NIST-regulated federal cloud systems.

In-office incident responder in Bengaluru mitigating attacks at Cloudflare's edge and supporting compromised customers.

Fully remote US SOC analyst investigating EDR alerts, malware and M365 threats in Huntress's managed SOC.

Remote pentester in Mexico testing web, API, cloud, mobile and AI/LLM targets for Bishop Fox clients.