Writing.io Jobs

Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.

1 What roles are you open to?

2 Experience level

3 Work style

Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.

Security Junior Open Source Intelligence Analyst (Singapore, Remote) at Concentric Corporation

Monitors public sources and social media to investigate threats, fraud, safety risks, and persons of interest using OSINT techniques.

Junior Remote Posted about 23 hours ago RemoteFirstJobs Product
What this role involves

Are you interested in joining an organization with a global reach? In a world of shifting threats, Concentric is your trusted ally. Powered by elite professionals from military, government, and intelligence backgrounds. If you are passionate about intelligence, risk analysis, threat management, executive protection, security operations, or business resiliency, Concentric may be the organization you’ve been searching for!

Concentric is a risk consultancy specializing in delivering strategic security and intelligence services. We provide holistic, intelligent security solutions for private clients and corporations globally. Concentric offers strategic advisory services, risk assessments, physical protection, threat intelligence, open-source monitoring, program audits, secure embedded staffing, and training for security teams and intelligence analysts.

Our ultimate goal is to be recognized as the most innovative, capable, and trusted Risk Management partner in the world, and we do this by following these core values:

Integrity – Collaboration - Relationships – Excellence – Creativity - Results

Join Us,

Concentric - “Your World Secured”

We are currently looking to hire a Junior Open-Source Intelligence Analyst to join our team embedded with our client in Singapore!

*This is a full-time, remote position open to candidates based in Singapore. Applicants must be authorized to work in Singapore without employer sponsorship.

JOB DESCRIPTION

The Open-Source Intelligence (OSINT) Analyst will be responsible for monitoring all source information to proactively identify and assess risks and threats to the client, its hosts, and their guests. This position requires excellent communication skills and the ability to synthesize intelligence from multiple sources into products that clearly communicate risk and opportunity.  “Open source investigation” includes ongoing, persistent monitoring for threats; person of interest (POI) investigations; and social media analysis. This position sits under the organization’s Global Investigations (GI) program and within Fraud & Safety Operations, which drives proactive detection, investigation, and enforcement against organized platform abuse and severe safety threats.

RESPONSIBILITIES

  • Monitor social media and public sources with OSINT tools to find advertising and event promotions that mention the client, using keyword, hashtag, geolocation, and image-based search techniques.
  • Investigate each post to connect the promoter, venue, or hosting account to client activity: user accounts, connected accounts, listings searched and shared, and messaging or booking signals.
  • Use internal data tools and basic SQL to query account, listing, and reservation data; pivot on identifiers such as phone, email, device, and payment to resolve an advertisement to reservations and surface connected accounts.
  • Assess the level of risk (event size, timing, awareness, prior incidents, weapons or drug references) and recommend a tactical mitigation, from review to cancellation and account enforcement.
  • Escalate resolved cases to Community Support Safety and other stakeholders with clear, evidence-backed write-ups, and document every step in the case management system to a standard that supports enforcement and, where needed, law enforcement disclosure.
  • Follow the misattributed accounts user agreement, privacy guidelines, and levels-of-research policy on every case.
  • Track case volume and outcomes, flag recurring promoters and venues, and share patterns that strengthen detection with the GI team and partner teams.
  • Research international locations where clients and their employees may visit. This information may include crime and safety risks, political stability, and travel safety with regard to hotels and event venues, local customs and courtesies, and transportation best practices.
  • Follow company procedures and processes as they relate to industry best practices and handling of confidential information.
  • Develop and maintain strong relationships with other business partners to effectively support their needs.
  • Work a flexible schedule as part of a 24⁄7 team, including assigned shifts on days, evenings, weekends, and holidays.
  • Communicate with co-workers, management, clients, and others in a courteous and professional manner.
  • Conform to and abide by all regulations, policies, work procedures, and instructions
  • This position may require up to 10% travel

REQUIRED QUALIFICATIONS

  • 2–4 years of experience in OSINT, trust and safety, fraud, intelligence, or investigations, or demonstrated skills commensurate with that experience.
  • Hands-on open-source research skills: social media investigation, advanced Boolean searches, reverse image search, geolocation, and account attribution across platforms.
  • Strong critical thinking, with the ability to weigh incomplete evidence, judge risk, and recommend a proportionate response.
  • Comfortable working with structured data; basic SQL or a demonstrated ability to learn it within the first 90 days.
  • Clear, concise written communication for case notes and stakeholder escalations.
  • High attention to detail, sound judgment with sensitive personal data, and a commitment to the organization’s core values.
  • Ability to work some non-traditional hours (nights, weekends, and holidays), since most events are promoted and held outside business hours.
  • Comfortable with changing requirements and priorities
  • Experience working with the identification and analysis of threats made by POIs
  • Able to proactively communicate status and identify risks
  • Excellent writing and oral communication skills; Experience working with highly confidential information
  • Experience working with diverse partners

PREFERRED QUALIFICATIONS

  • Bachelor’s degree preferred; experience may substitute.
  • Regional expertise
  • Language skills
  • Data analysis
  • Experience using open-source and/or social media tools

COMPENSATION & BENEFITS

  • Medical, Dental, Vision, EAP (Employee Assistance Program), Wellness. Benefits include Inpatient, Outpatient, Maternity, Dental, Vision, and EAP.
  • Life, AD&D (Accidental Death & Dismemberment), PTD (Permanent Total Disability).
  • Group term life insurance $100,000
  • Employee Assistance Program for personal needs
  • Pension Scheme
  • Discretionary Bonus after 1 year
  • 14 Days of Annual Leave (Vacation)
  • 14 Sick Days
  • 11 Public Holidays
  • Maternity and paternity leave
  • $1000 one-time stipend for Phone purchase and $100 monthly phone stipend
  • Free access to our Risk Intelligence Dashboard and GEAR App. Providing 24⁄7 access to trusted risk intelligence and remote support, helping you stay informed, prepared, and protected wherever you operate.
  • Coaching and Mentoring Opportunities

Singapore Pay Range

$75,000—$80,000 SGD

Concentric and SPS Global acknowledge the systemic barriers in the security industry and recognize that removing those barriers will require a collaborative and conscious effort. Concentric and SPS Global are committed to programs and initiatives that promote diversity, equity, and inclusion, enhancing our organization and the broader community. We are creating a diverse environment and are proud to be an equal opportunity employer. We encourage people from all backgrounds to apply. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Concentric Advisors and SPS Global are committed to protecting the privacy and security of all applicants who submit personal information to us. You can access our GDPR and CCPA policy by clicking the GDPR button at the bottom of our career page.

Read the full description
Security Security Analyst Internship at OpenSesame

Supports security compliance, audit evidence collection, vulnerability reporting, phishing simulations, penetration testing, and GRC workflow automation.

Junior Posted 2 days ago RemoteFirstJobs Product
What this role involves

About OpenSesame

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world’s most productive and admired workforces.

Learn more: www.opensesame.com/about

Internship Overview

OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.

As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

2 Weeks

  • Gain hands-on experience with GRC compliance tools such as Drata and security tools such as Crowdstrike.
  • Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
  • Shadow team members to understand security and compliance workflows.
  • Become familiar with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.

30 Days

  • Assist in collecting and reviewing technical security evidence for audits and tracking.
  • Support security initiatives, including phishing simulations, email security, and pen-testing programs.
  • Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
  • Propose and develop workflow automations to streamline GRC and security operations.

60 Days

  • Take ownership of assigned security projects, contributing independently to deliverables.
  • Become comfortable owning several audit evidence collection tasks in Drata.
  • Assist in analyzing vulnerability findings and tracking remediation efforts.
  • Gain hands-on familiarity with AWS cloud security operations and vulnerability assessments.

Additional Program Details

Eligibility:

  • Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)

Application Closes:

  • Friday, October 23, 2026

Program Dates:

  • Projected Start Date: Tuesday, November 17, 2026
  • Projected End Date: Friday, April 9, 2027

Commitment:

  • Full-time (32 to 40 hours/week) for 20 weeks
  • Must commit to working regular office hours in the US continental time zones (e.g. from 9 AM EST to 5 PM EST or 9 AM PST to 5 PM PST within Monday to Friday period

Compensation:

  • Standard: $18/hour

Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.

Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. We’re excited to see what you’ll bring to the table!

We use AI. For real. Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. You’ll build fluency that most companies are still talking about adopting, with hands-on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesn’t replace them. The skills you build here travel with you.

Location: This position can be based anywhere in the U.S.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General’s website.

We Care About Your Security: We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at careers@opensesame.com. Your security matters to us, thank you for staying vigilant.

Read the full description
Security Security Analyst Internship at OpenSesame

Supports security compliance, audit evidence collection, vulnerability reporting, phishing simulations, penetration testing, and GRC workflow automation.

Junior Posted 2 days ago RemoteFirstJobs Product
What this role involves

About OpenSesame

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world’s most productive and admired workforces.

Learn more: www.opensesame.com/about

Internship Overview

OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.

As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

2 Weeks

  • Gain hands-on experience with GRC compliance tools such as Drata and security tools such as Crowdstrike.
  • Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
  • Shadow team members to understand security and compliance workflows.
  • Become familiar with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.

30 Days

  • Assist in collecting and reviewing technical security evidence for audits and tracking.
  • Support security initiatives, including phishing simulations, email security, and pen-testing programs.
  • Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
  • Propose and develop workflow automations to streamline GRC and security operations.

60 Days

  • Take ownership of assigned security projects, contributing independently to deliverables.
  • Become comfortable owning several audit evidence collection tasks in Drata.
  • Assist in analyzing vulnerability findings and tracking remediation efforts.
  • Gain hands-on familiarity with AWS cloud security operations and vulnerability assessments.

Additional Program Details

Eligibility:

  • Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)

Application Closes:

  • Friday, October 23, 2026

Program Dates:

  • Projected Start Date: Tuesday, November 17, 2026
  • Projected End Date: Friday, April 9, 2027

Commitment:

  • Full-time (32 to 40 hours/week) for 20 weeks
  • Must commit to working regular office hours in the US continental time zones (e.g. from 9 AM EST to 5 PM EST or 9 AM PST to 5 PM PST within Monday to Friday period

Compensation:

  • Standard: $18/hour

Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.

Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. We’re excited to see what you’ll bring to the table!

We use AI. For real. Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. You’ll build fluency that most companies are still talking about adopting, with hands-on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesn’t replace them. The skills you build here travel with you.

Location: This position can be based anywhere in the U.S.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General’s website.

We Care About Your Security: We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at careers@opensesame.com. Your security matters to us, thank you for staying vigilant.

Read the full description
Security Junior Incident Response Consultant - Hybrid at Pondurance

Supports digital forensic investigations, analyzes evidence for malicious activity, and assists with containment, eradication, and incident response reporting.

Junior Hybrid Posted 2 days ago RemoteFirstJobs Product
What this role involves

Junior Incident Response Consultant

Hybrid (McLean, VA)

About the Role:

Do you want to influence real change? Do you want to be part of the solution? Then join Pondurance in ensuring every organization is ableto detect and respond to cyber threats – regardless of size, industry, or current in-housecapabilities.

As a Junior Incident Response Consultant, you will support forensic investigations alongside Principal, Senior, and standard Consultants within the Incident Response program. Your goal will be to assist in stopping compromises through containment, eradication, and data access forensic efforts. You will leverage our tech stack and support our clients during incident response.

This is a hybrid role, and candidates must be located in the McLean, VA area. Employees are expected to work in the McLean office approximately 20% of the time for device collection and other business needs.

Responsibilities:

  • Assist Principal and Senior consultants throughout the Incident Response lifecycle, from containment to reporting.
  • Analyze relevant forensic datasets and present findings clearly to the internal Pondurance team.
  • Detect signs of unauthorized or malicious activity across collected forensic evidence.
  • Highlight potential evidence gaps and report findings in a structured format to team members.
  • Work from the McLean, VA office approximately 20% of the time for device collection and other business needs.
  • Deliver after-hours investigative support on an as-needed basis.

Technologies:

  • Productivity Suites: Microsoft 365 & MS Office
  • Team Collaboration Tools: Live chat platforms (e.g., Slack)
  • Command Line Tools: PowerShell, Terminals, iTerm2
  • Basic Scripting Languages: Python, Bash, Java, C++
  • Operating Environments: Windows Systems

Knowledge and Skills:

  • A Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience in a relevant discipline
  • Proven understanding of Business Email Compromise (BEC) attack lifecycles
  • Familiarity with phishing tactics and mitigation strategies
  • Proficiency in utilizing diverse investigative tools to construct detailed incident timelines

Compensation:

The anticipated base salary range for this position is $85,000 - $92,000 annually

Actual compensation will be determined in good faith based on factors such as relevant experience, technical expertise, certifications, geographic location (where applicable), and internal equity. This position may also be eligible for bonus or other incentive compensation, as well as the benefits described below.

Who we are:

At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place.  We believe in inviting good people into our company who are driven to become great!

Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as mentors who believe “None of us are as smart as all of us” (R. Pelletier).

We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice,and we want you to use it.

Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.

What We Offer:

The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.

An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.

Some of the corporate benefits (there are more) for full-time employees include:

  • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan.
  • Time off: PTO, sick, holiday, & parental leave details are available

To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.

We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.

Read the full description
Security Security Research Internship

Conducts security research and supports blockchain security assessments as an intern at CertiK.

Junior Posted 5 days ago Jobicy AI
What this role involves
About CertiK One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured...
Read the full description
Security Cybersecurity Presales Intern - GPSU/Heartland (Tulsa) at GuidePoint Security

Supports cybersecurity presales through technical labs, client engagement, solution demonstrations, and assisting senior consultants with security delivery.

Junior Posted 6 days ago RemoteFirstJobs Product
What this role involves

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

Overview

As part of the GPSU program, we are seeking a Cybersecurity Presales Intern to support GuidePoint Security’s Heartland region. In this role, you will get hands-on experience in three core areas: certification and technical foundations, presales and client engagement, technical delivery and writing, and vendor knowledge. Experienced practitioners will mentor you directly on real work, not simulations. You don’t need prior experience in this exact role, but you do need technical aptitude, a habit of learning on your own, and real curiosity about cybersecurity.

You must be pursuing or have recently completed a Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field. We will also consider Associate’s degree candidates who show self-study and lab work. Non-traditional backgrounds are welcome to apply, including career changers, military veterans, and self-taught candidates, as long as they show equivalent knowledge. You will work with the Heartland presales team, shadowing senior consultants on client engagements and attending internal presales and delivery meetings to learn the business. This internship is a pathway to full-time employment. Candidates who show competence and cultural fit may receive a full-time offer, with a growth path to Pre-Sales Cybersecurity Technical Advisor and a long-term path toward CISSP-level certifications and senior advisory roles.

Responsibilities

  • Certification & Technical Foundation

    • Build a certification foundation with company-sponsored exam vouchers, including Security+, Network+, CySA+, and cloud certifications
    • Complete hands-on lab work to strengthen skills in networking, operating systems, cloud, and security
    • Take part in CTF platforms such as HackTheBox and TryHackMe to build practical offensive and defensive skills
    • Gain exposure to SIEM, vulnerability scanning, and endpoint security tools in lab and real-world settings under mentorship
  • Presales & Client Engagement

    • Shadow senior consultants on real client engagements, gaining early exposure to professional security consulting
    • Attend internal presales and delivery meetings to learn how GuidePoint scopes, sells, and delivers solutions
    • Practice explaining technical concepts to non-technical audiences in client-facing settings under mentorship
    • Support the preparation of presales materials, demos, and technical discussions alongside the Heartland team
  • Technical Writing & Vendor Knowledge

    • Practice technical writing, including executive summaries and findings reports
    • Build vendor-specific product knowledge aligned to GuidePoint’s technology partnerships
    • Research and document how partner solutions map to common client security challenges
    • Document lab work, engagement observations, and lessons learned to support your own growth and the team’s knowledge base

Qualifications

  • Pursuing or recently completed a Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field. Associate’s degree candidates with self-study and lab work, and non-traditional backgrounds with equivalent knowledge, will be considered
  • Foundational knowledge of networking, including TCP/IP, DNS, DHCP, HTTP/S, subnetting, VLANs, firewalls, and routing basics
  • Exemplifying leadership tendencies, such as leading student organizations or industry clubs
  • Comfort navigating both Windows and Linux, with command-line proficiency
  • Understanding of core security concepts, including the CIA triad, authentication vs. authorization, encryption basics, and common attack vectors (phishing, malware, ransomware, social engineering)
  • Basic understanding of at least one major cloud provider (AWS, Azure, or GCP) and the shared responsibility model
  • A habit of self-directed learning, shown through home labs, CTFs, blogs, or personal projects
  • Strong communication skills, with the ability to explain technical concepts to non-technical audiences
  • Coachable and open to feedback. You don’t need to be right, you need to get it right.
  • A self-starter who looks for work without being told, and has a collaborative, team-oriented mindset
  • Professional maturity: punctual, reliable, responsive, and presentable in client-facing settings

Preferred Qualifications

  • Active participation in cybersecurity communities (meetups, BSides, DEFCON, Discord/Slack groups)
  • Any existing certifications (CompTIA ITF+, A+, Network+, Security+)
  • Exposure to a SIEM, vulnerability scanner, or endpoint security tool, even in a lab environment
  • Basic scripting ability (Python, PowerShell, or Bash)
  • Previous customer-facing experience of any kind (retail, help desk, tutoring, etc.)

Internship Details and Expectations

This is a part-time, remote paid internship ($20/hr) that runs for 12 weeks from January 11 - April 2, 2027, with an optional in-person onboarding in Tampa FL during the first week. There is the potential for full-time employment at the end of the internship. During this internship, interns are expected to:

  • Be located near Tulsa, OK, or be willing to relocate there for follow-on full-time hire
  • Be physically located within the United States for the entire internship
  • Work 20-29 hrs/wk during standard business hours supporting the Central Time Zone
  • Have a personal computing device and high-speed internet access during working hours

This position is not available for candidates living in the following states: Alaska, California, Hawaii, New Mexico, New York, Oregon, Washington and Wyoming.

The below perks are for those that join GuidePoint Security for full-time employment only.

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don’t miss updates on your application.

Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

  • Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
  • Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
  • Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
  • 12 corporate holidays and a Flexible Time Off (FTO) program
  • Healthy mobile phone and home internet allowance
  • Eligibility for retirement plan after 2 months at open enrollment
  • Pet Benefit Option
Read the full description
Security Security & IT Intern at Eight Sleep

Supports corporate security, compliance, and IT projects under the security team, owning bounded initiatives and presenting results to engineering.

Junior Posted 10 days ago RemoteFirstJobs Product
What this role involves

Join the Sleep Fitness Movement

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company’s Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME’s “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

High Standards. No Apologies.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.

The Role

This is a hands-on corporate security and IT internship working with the Security team that also manages security, compliance and IT for the company. You will work directly with the Head of Security and the Security Engineer. It is part time, 20 hours a week around your class schedule, and you will own bounded projects end to end, ship them, and demo them to the engineering org.

How you’ll contribute

  • Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit.

  • Run the access-review and device-compliance checks, then automate the parts you find yourself repeating.

  • Keep compliance green with code: help remediate failing Vanta tests and automate evidence collection.

  • Triage inbound security and IT requests from employees for one shift a week, with a mentor reviewing every response.

  • Write runbooks and triage notes that an engineer, or an AI agent, can leverage.

  • Use AI tools (Claude Code and similar) as a first resort to scale your own work, and push those workflows toward fully automated production jobs.

What you need to succeed

  • AI-first mindset. We empower the team with the best tools available to scale beyond themselves.

  • Junior or Senior at a US college or university, in computer science or a related program.

  • Scripting ability in Python or similar. You have written something that calls an API and does a job for you.

  • Working knowledge of how identity works in a company: SSO, MFA, directory groups, least privilege.

  • One concrete thing you have administered or secured: a club’s Google Workspace, a home lab, a campus help desk, a CTF team’s infrastructure, a part-time IT job.

  • Clear security writing: send us something you wrote (a lab writeup, a README, a blog post, a how-to).

  • Available 20 hours a week during the school year, with at least 4 hours of overlap with US business hours on 3 or more days. Authorized to work in the US; this role is not eligible for visa sponsorship.

Bonus points for

  • CTF participation, bug bounty writeups, or a GitHub with real projects.

  • Help desk, campus IT, or MSP experience.

  • Exposure to any compliance framework (SOC 2, HIPAA, ISO 27001) through coursework or a job.

Why join Eight Sleep?

Innovation in a culture of excellence

Join us in a workplace where innovation isn’t just encouraged - it’s a standard. Our flagship product, the Pod, is a testament to our culture of excellence, beloved by hundreds of thousands of customers worldwide. At Eight Sleep, you will be part of a team that continuously pushes the boundaries of technology in sleep fitness.

Immediate responsibility and accelerated career growth

From your first day, you’ll take on substantial responsibilities that have a direct impact on our core business and product success. We are a small team that empowers you to own your projects and see the tangible effects of your efforts, enhancing both your professional growth and our company’s trajectory. Your path will be challenging but rewarding, perfect for those who thrive in fast-paced environments aiming for high standards.

Collaboration with exceptional talent

Work alongside other bright minds like you: at Eight Sleep exceptional intelligence and a passion for breakthroughs are the norms. Our team members are not only experts in their fields but also avid innovators who thrive in our dynamic, fast-paced environment.

Equitable compensation and continuous equity investment

We extend equity participation to every full-time team member, recognizing and rewarding your direct contributions to our success. This includes periodic equity refreshments based on performance, ensuring that as Eight Sleep grows and succeeds, so do you – perfectly aligning your achievements with the broader triumphs of the company.

At Eight Sleep we continually celebrate the diverse community different individuals cultivate. As an equal opportunity employer, we stay true to our values by ensuring everyone feels they can flourish and grow. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Read the full description
Security Security & IT Intern at Eight Sleep

Supports corporate security, compliance, and IT projects under the security team, delivering bounded initiatives and demos.

Junior Posted 10 days ago RemoteFirstJobs Product
What this role involves

Join the Sleep Fitness Movement

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company’s Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME’s “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

High Standards. No Apologies.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.

The Role

This is a hands-on corporate security and IT internship working with the Security team that also manages security, compliance and IT for the company. You will work directly with the Head of Security and the Security Engineer. It is part time, 20 hours a week around your class schedule, and you will own bounded projects end to end, ship them, and demo them to the engineering org.

How you’ll contribute

  • Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit.

  • Run the access-review and device-compliance checks, then automate the parts you find yourself repeating.

  • Keep compliance green with code: help remediate failing Vanta tests and automate evidence collection.

  • Triage inbound security and IT requests from employees for one shift a week, with a mentor reviewing every response.

  • Write runbooks and triage notes that an engineer, or an AI agent, can leverage.

  • Use AI tools (Claude Code and similar) as a first resort to scale your own work, and push those workflows toward fully automated production jobs.

What you need to succeed

  • AI-first mindset. We empower the team with the best tools available to scale beyond themselves.

  • Junior or Senior at a US college or university, in computer science or a related program.

  • Scripting ability in Python or similar. You have written something that calls an API and does a job for you.

  • Working knowledge of how identity works in a company: SSO, MFA, directory groups, least privilege.

  • One concrete thing you have administered or secured: a club’s Google Workspace, a home lab, a campus help desk, a CTF team’s infrastructure, a part-time IT job.

  • Clear security writing: send us something you wrote (a lab writeup, a README, a blog post, a how-to).

  • Available 20 hours a week during the school year, with at least 4 hours of overlap with US business hours on 3 or more days. Authorized to work in the US; this role is not eligible for visa sponsorship.

Bonus points for

  • CTF participation, bug bounty writeups, or a GitHub with real projects.

  • Help desk, campus IT, or MSP experience.

  • Exposure to any compliance framework (SOC 2, HIPAA, ISO 27001) through coursework or a job.

Why join Eight Sleep?

Innovation in a culture of excellence

Join us in a workplace where innovation isn’t just encouraged - it’s a standard. Our flagship product, the Pod, is a testament to our culture of excellence, beloved by hundreds of thousands of customers worldwide. At Eight Sleep, you will be part of a team that continuously pushes the boundaries of technology in sleep fitness.

Immediate responsibility and accelerated career growth

From your first day, you’ll take on substantial responsibilities that have a direct impact on our core business and product success. We are a small team that empowers you to own your projects and see the tangible effects of your efforts, enhancing both your professional growth and our company’s trajectory. Your path will be challenging but rewarding, perfect for those who thrive in fast-paced environments aiming for high standards.

Collaboration with exceptional talent

Work alongside other bright minds like you: at Eight Sleep exceptional intelligence and a passion for breakthroughs are the norms. Our team members are not only experts in their fields but also avid innovators who thrive in our dynamic, fast-paced environment.

Equitable compensation and continuous equity investment

We extend equity participation to every full-time team member, recognizing and rewarding your direct contributions to our success. This includes periodic equity refreshments based on performance, ensuring that as Eight Sleep grows and succeeds, so do you – perfectly aligning your achievements with the broader triumphs of the company.

At Eight Sleep we continually celebrate the diverse community different individuals cultivate. As an equal opportunity employer, we stay true to our values by ensuring everyone feels they can flourish and grow. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Read the full description
Security Security & IT Intern at Eight Sleep

Supports corporate security, compliance, and IT projects under the Security team, owning bounded initiatives through delivery and demonstration.

Junior Posted 10 days ago RemoteFirstJobs Product
What this role involves

Join the Sleep Fitness Movement

At Eight Sleep, we’re on a mission to fuel human potential through optimal sleep. As the world’s first sleep fitness company, we’re redefining what it means to be well-rested and building the most advanced hardware, software, and AI technology to make it possible. Our products power peak mental, physical, and emotional performance by transforming every night of sleep into a personalized, data-driven recovery experience. We are trusted by high performers, professional athletes, and health-conscious consumers in over 30 countries worldwide. Recognized as one of Fast Company’s Most Innovative Companies in 2019, 2022, and 2023, and twice named to TIME’s “Best Inventions of the Year.” We operate like a high-performance team: fast, focused, and motivated by impact. We don’t just ship; we iterate, refine, and obsess over the details that help our members sleep better and wake up stronger.

Every role at Eight Sleep is a chance to create cutting-edge technology, collaborate with world-class talent, and help shape a future where sleep isn’t passive - it’s a powerful tool for living better. If you’re tired of the ordinary and driven to build at the edge of what’s possible, this is your moment. Join us and lead the movement that’s transforming how the world sleeps and what we’re all capable of when we wake up.

High Standards. No Apologies.

We operate with intensity because our mission demands it. At Eight Sleep, we bring the same mindset as the world’s top performers: focused, relentless, and always pushing to be in the top 1% of our craft. Think Kobe Bryant’s mamba mentality, applied to bold ideas, next-gen tech, and flawless execution. This isn’t a 9-to-5. Our team is deeply committed, often putting in 60+ hours a week –not because we’re told to, but because we’re invested. We’re here to build fast, push limits, and deliver without compromise. If you thrive under pressure and want to do the most meaningful work of your career, you’ll feel right at home. If you’re looking for something easier –this isn’t it.

The Role

This is a hands-on corporate security and IT internship working with the Security team that also manages security, compliance and IT for the company. You will work directly with the Head of Security and the Security Engineer. It is part time, 20 hours a week around your class schedule, and you will own bounded projects end to end, ship them, and demo them to the engineering org.

How you’ll contribute

  • Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit.

  • Run the access-review and device-compliance checks, then automate the parts you find yourself repeating.

  • Keep compliance green with code: help remediate failing Vanta tests and automate evidence collection.

  • Triage inbound security and IT requests from employees for one shift a week, with a mentor reviewing every response.

  • Write runbooks and triage notes that an engineer, or an AI agent, can leverage.

  • Use AI tools (Claude Code and similar) as a first resort to scale your own work, and push those workflows toward fully automated production jobs.

What you need to succeed

  • AI-first mindset. We empower the team with the best tools available to scale beyond themselves.

  • Junior or Senior at a US college or university, in computer science or a related program.

  • Scripting ability in Python or similar. You have written something that calls an API and does a job for you.

  • Working knowledge of how identity works in a company: SSO, MFA, directory groups, least privilege.

  • One concrete thing you have administered or secured: a club’s Google Workspace, a home lab, a campus help desk, a CTF team’s infrastructure, a part-time IT job.

  • Clear security writing: send us something you wrote (a lab writeup, a README, a blog post, a how-to).

  • Available 20 hours a week during the school year, with at least 4 hours of overlap with US business hours on 3 or more days. Authorized to work in the US; this role is not eligible for visa sponsorship.

Bonus points for

  • CTF participation, bug bounty writeups, or a GitHub with real projects.

  • Help desk, campus IT, or MSP experience.

  • Exposure to any compliance framework (SOC 2, HIPAA, ISO 27001) through coursework or a job.

Why join Eight Sleep?

Innovation in a culture of excellence

Join us in a workplace where innovation isn’t just encouraged - it’s a standard. Our flagship product, the Pod, is a testament to our culture of excellence, beloved by hundreds of thousands of customers worldwide. At Eight Sleep, you will be part of a team that continuously pushes the boundaries of technology in sleep fitness.

Immediate responsibility and accelerated career growth

From your first day, you’ll take on substantial responsibilities that have a direct impact on our core business and product success. We are a small team that empowers you to own your projects and see the tangible effects of your efforts, enhancing both your professional growth and our company’s trajectory. Your path will be challenging but rewarding, perfect for those who thrive in fast-paced environments aiming for high standards.

Collaboration with exceptional talent

Work alongside other bright minds like you: at Eight Sleep exceptional intelligence and a passion for breakthroughs are the norms. Our team members are not only experts in their fields but also avid innovators who thrive in our dynamic, fast-paced environment.

Equitable compensation and continuous equity investment

We extend equity participation to every full-time team member, recognizing and rewarding your direct contributions to our success. This includes periodic equity refreshments based on performance, ensuring that as Eight Sleep grows and succeeds, so do you – perfectly aligning your achievements with the broader triumphs of the company.

At Eight Sleep we continually celebrate the diverse community different individuals cultivate. As an equal opportunity employer, we stay true to our values by ensuring everyone feels they can flourish and grow. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Read the full description
Security Threat Intelligence Research Intern

Conducts threat intelligence research and supports analysis of cybersecurity threats as an intern.

Junior Remote Posted 10 days ago Himalayas
What this role involves
This is a remote position. A Threat Intelligence Research Intern is a temporary position, typically designed for students or recent graduates seeking hands-on experience in the field of threat intelligence research.
Read the full description
Security Information Security Compliance Intern at Sprinto

Supports audit and compliance programs by working with SOC 2 and ISO 27001 frameworks, audit partners, and GRC processes.

Junior Remote Posted 12 days ago RemoteFirstJobs Product
What this role involves

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.

Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto’s extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.

Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.

Life as a Sprinter -

Nobody succeeds at Sprinto by staying in their lane.

We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don’t wait for permission; we step in.

Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren’t built by sitting together, they’re built by pulling in the same direction.

We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.

And while we move with urgency, we never move alone.

The mission -

The Audit Experience function manages Sprinto’s relationship with its audit partner ecosystem. This role offers a structured pathway to building genuine subject matter expertise in GRC and audit — not just theoretical familiarity, but the kind of depth that comes from working directly alongside an SME on real programs. The intern will engage hands-on with compliance frameworks like SOC 2 and ISO 27001, audit partner lifecycle management, and the product-led GRC environment that Sprinto operates in.

This role is designed for someone who wants to develop into a domain expert in GRC and audit — you’ll build deep working knowledge of how audit programs function, how compliance controls are evaluated, and how information and cybersecurity requirements translate into real audit expectations. Day-to-day program support provides the applied context that accelerates this learning, grounding abstract frameworks in live, operational decisions.

Where you’ll leave your mark?

  • Audit Partner Enablement Operations - Track and drive audit partners through the onboarding and enablement lifecycle. Maintain internal trackers, coordinate across teams to unblock dependencies, and flag partners stalling at any stage.
  • Auditor Directory Maintenance - Keep the auditor directory accurate and current — verify accreditation status against relevant accreditation bodies, update partner profiles, and ensure listing information remains factually accurate.
  • Evidence Mapping Support - Assist the SME in mapping audit evidence requirements to platform capabilities. This includes preparing reference data, identifying gaps, and documenting findings that feed into product improvement workflows.
  • Audit Partner Vetting - Run the verification process for new audit partner candidates.
  • Query Management - Serve as the first responder for routine auditor and internal team queries. Escalate non-routine matters to the SME.
  • AI-Assisted Workflow Building - Build and iterate on AI agents to handle routine Audit Experience tasks — including audit partner queries, periodic auditor directory reviews, and evidence mapping lookups. Working with GenAI platforms such as Claude, ChatGPT, or Gemini, you’ll design prompts, test agentic workflows, and help establish repeatable automation patterns that reduce manual effort over time.
  • Ad Hoc Audit Experience Support - Assist the SME with other Audit Experience initiatives as they arise — including research, documentation, process improvement, and cross-functional coordination.

The kind of builder we’re looking for -

  • Completed a graduation or master’s degree in GRC, Information Security, Risk Management, Computer Science, or a related field — candidates with an academic background directly in GRC or audit are strongly preferred

  • Prior exposure to audits — whether through academic projects, internships, or professional experience — is a strong plus; candidates who have worked in or adjacent to audit functions are particularly encouraged to apply

  • Genuine interest in exploring information and cybersecurity — you’re curious about how audit and compliance frameworks connect to real-world security posture, not just ticking boxes

  • Comfortable working with spreadsheets, trackers, and data — a lot of the learning here happens through doing, not just observing

  • Strong attention to detail — verification and mapping reviews are precision work

  • Good written communication — you’ll be documenting processes and responding to audit partner queries

  • Comfortable using GenAI tools — Claude, ChatGPT, Gemini, or any equivalent platform; prior experience building agents or automating workflows with AI is a strong plus, but a genuine appetite to learn and experiment is what matters most

  • Self-directed — the SME will provide guidance and review, but you’re expected to own the operational cadence independently

How we care for our Sprinters?

  • Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
  • Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
  • We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
  • We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
  • Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
  • Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.

Inclusion & Diversity -

At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.

We’re proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security Information Security Compliance Intern at Sprinto

Supports audit and compliance programs by working with SOC 2 and ISO 27001 frameworks, audit partners, and GRC processes.

Junior Remote Posted 12 days ago RemoteFirstJobs Product
What this role involves

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.

Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto’s extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.

Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.

Life as a Sprinter -

Nobody succeeds at Sprinto by staying in their lane.

We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don’t wait for permission; we step in.

Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren’t built by sitting together, they’re built by pulling in the same direction.

We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.

And while we move with urgency, we never move alone.

The mission -

The Audit Experience function manages Sprinto’s relationship with its audit partner ecosystem. This role offers a structured pathway to building genuine subject matter expertise in GRC and audit — not just theoretical familiarity, but the kind of depth that comes from working directly alongside an SME on real programs. The intern will engage hands-on with compliance frameworks like SOC 2 and ISO 27001, audit partner lifecycle management, and the product-led GRC environment that Sprinto operates in.

This role is designed for someone who wants to develop into a domain expert in GRC and audit — you’ll build deep working knowledge of how audit programs function, how compliance controls are evaluated, and how information and cybersecurity requirements translate into real audit expectations. Day-to-day program support provides the applied context that accelerates this learning, grounding abstract frameworks in live, operational decisions.

Where you’ll leave your mark?

  • Audit Partner Enablement Operations - Track and drive audit partners through the onboarding and enablement lifecycle. Maintain internal trackers, coordinate across teams to unblock dependencies, and flag partners stalling at any stage.
  • Auditor Directory Maintenance - Keep the auditor directory accurate and current — verify accreditation status against relevant accreditation bodies, update partner profiles, and ensure listing information remains factually accurate.
  • Evidence Mapping Support - Assist the SME in mapping audit evidence requirements to platform capabilities. This includes preparing reference data, identifying gaps, and documenting findings that feed into product improvement workflows.
  • Audit Partner Vetting - Run the verification process for new audit partner candidates.
  • Query Management - Serve as the first responder for routine auditor and internal team queries. Escalate non-routine matters to the SME.
  • AI-Assisted Workflow Building - Build and iterate on AI agents to handle routine Audit Experience tasks — including audit partner queries, periodic auditor directory reviews, and evidence mapping lookups. Working with GenAI platforms such as Claude, ChatGPT, or Gemini, you’ll design prompts, test agentic workflows, and help establish repeatable automation patterns that reduce manual effort over time.
  • Ad Hoc Audit Experience Support - Assist the SME with other Audit Experience initiatives as they arise — including research, documentation, process improvement, and cross-functional coordination.

The kind of builder we’re looking for -

  • Completed a graduation or master’s degree in GRC, Information Security, Risk Management, Computer Science, or a related field — candidates with an academic background directly in GRC or audit are strongly preferred

  • Prior exposure to audits — whether through academic projects, internships, or professional experience — is a strong plus; candidates who have worked in or adjacent to audit functions are particularly encouraged to apply

  • Genuine interest in exploring information and cybersecurity — you’re curious about how audit and compliance frameworks connect to real-world security posture, not just ticking boxes

  • Comfortable working with spreadsheets, trackers, and data — a lot of the learning here happens through doing, not just observing

  • Strong attention to detail — verification and mapping reviews are precision work

  • Good written communication — you’ll be documenting processes and responding to audit partner queries

  • Comfortable using GenAI tools — Claude, ChatGPT, Gemini, or any equivalent platform; prior experience building agents or automating workflows with AI is a strong plus, but a genuine appetite to learn and experiment is what matters most

  • Self-directed — the SME will provide guidance and review, but you’re expected to own the operational cadence independently

How we care for our Sprinters?

  • Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
  • Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
  • We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
  • We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
  • Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
  • Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.

Inclusion & Diversity -

At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.

We’re proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security Information Security Compliance Intern at Sprinto

Supports audit and compliance programs by working with SOC 2 and ISO 27001 frameworks, audit partners, and GRC processes.

Junior Remote Posted 12 days ago RemoteFirstJobs Product
What this role involves

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.

Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto’s extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.

Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.

Life as a Sprinter -

Nobody succeeds at Sprinto by staying in their lane.

We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don’t wait for permission; we step in.

Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren’t built by sitting together, they’re built by pulling in the same direction.

We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.

And while we move with urgency, we never move alone.

The mission -

The Audit Experience function manages Sprinto’s relationship with its audit partner ecosystem. This role offers a structured pathway to building genuine subject matter expertise in GRC and audit — not just theoretical familiarity, but the kind of depth that comes from working directly alongside an SME on real programs. The intern will engage hands-on with compliance frameworks like SOC 2 and ISO 27001, audit partner lifecycle management, and the product-led GRC environment that Sprinto operates in.

This role is designed for someone who wants to develop into a domain expert in GRC and audit — you’ll build deep working knowledge of how audit programs function, how compliance controls are evaluated, and how information and cybersecurity requirements translate into real audit expectations. Day-to-day program support provides the applied context that accelerates this learning, grounding abstract frameworks in live, operational decisions.

Where you’ll leave your mark?

  • Audit Partner Enablement Operations - Track and drive audit partners through the onboarding and enablement lifecycle. Maintain internal trackers, coordinate across teams to unblock dependencies, and flag partners stalling at any stage.
  • Auditor Directory Maintenance - Keep the auditor directory accurate and current — verify accreditation status against relevant accreditation bodies, update partner profiles, and ensure listing information remains factually accurate.
  • Evidence Mapping Support - Assist the SME in mapping audit evidence requirements to platform capabilities. This includes preparing reference data, identifying gaps, and documenting findings that feed into product improvement workflows.
  • Audit Partner Vetting - Run the verification process for new audit partner candidates.
  • Query Management - Serve as the first responder for routine auditor and internal team queries. Escalate non-routine matters to the SME.
  • AI-Assisted Workflow Building - Build and iterate on AI agents to handle routine Audit Experience tasks — including audit partner queries, periodic auditor directory reviews, and evidence mapping lookups. Working with GenAI platforms such as Claude, ChatGPT, or Gemini, you’ll design prompts, test agentic workflows, and help establish repeatable automation patterns that reduce manual effort over time.
  • Ad Hoc Audit Experience Support - Assist the SME with other Audit Experience initiatives as they arise — including research, documentation, process improvement, and cross-functional coordination.

The kind of builder we’re looking for -

  • Completed a graduation or master’s degree in GRC, Information Security, Risk Management, Computer Science, or a related field — candidates with an academic background directly in GRC or audit are strongly preferred

  • Prior exposure to audits — whether through academic projects, internships, or professional experience — is a strong plus; candidates who have worked in or adjacent to audit functions are particularly encouraged to apply

  • Genuine interest in exploring information and cybersecurity — you’re curious about how audit and compliance frameworks connect to real-world security posture, not just ticking boxes

  • Comfortable working with spreadsheets, trackers, and data — a lot of the learning here happens through doing, not just observing

  • Strong attention to detail — verification and mapping reviews are precision work

  • Good written communication — you’ll be documenting processes and responding to audit partner queries

  • Comfortable using GenAI tools — Claude, ChatGPT, Gemini, or any equivalent platform; prior experience building agents or automating workflows with AI is a strong plus, but a genuine appetite to learn and experiment is what matters most

  • Self-directed — the SME will provide guidance and review, but you’re expected to own the operational cadence independently

How we care for our Sprinters?

  • Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
  • Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
  • We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
  • We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
  • Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
  • Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.

Inclusion & Diversity -

At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.

We’re proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security Junior Incident Response Consultant at Pondurance

Supports incident response investigations by analyzing forensic evidence, detecting malicious activity, and assisting with containment, eradication, and reporting.

Junior Remote Posted 17 days ago RemoteFirstJobs Product
What this role involves

Junior Incident Response Consultant

REMOTE (McLean, VA candidates preferred)

About the Role:

Do you want to influence real change? Do you want to be part of the solution? Then join Pondurance in ensuring every organization is ableto detect and respond to cyber threats – regardless of size, industry, or current in-housecapabilities.

As a Junior Incident Response Consultant, you will support forensic investigations alongside Principal, Senior, and standard Consultants within the Incident Response program. Your goal will be to assist in stopping compromises through containment, eradication, and data access forensic efforts. You will leverage our tech stack and support our clients during incident response.

Responsibilities:

  • Assist Principal and Senior consultants throughout the Incident Response lifecycle, from containment to reporting.
  • Analyze relevant forensic datasets and present findings clearly to the internal Pondurance team.
  • Detect signs of unauthorized or malicious activity across collected forensic evidence.
  • Highlight potential evidence gaps and report findings in a structured format to team members.
  • Deliver after-hours investigative support on an as-needed basis.

Technologies:

  • Productivity Suites: Microsoft 365 & MS Office
  • Team Collaboration Tools: Live chat platforms (e.g., Slack)
  • Command Line Tools: PowerShell, Terminals, iTerm2
  • Basic Scripting Languages: Python, Bash, Java, C++
  • Operating Environments: Windows Systems

Knowledge and Skills:

  • A Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience in a relevant discipline
  • Proven understanding of Business Email Compromise (BEC) attack lifecycles
  • Familiarity with phishing tactics and mitigation strategies
  • Proficiency in utilizing diverse investigative tools to construct detailed incident timelines

Compensation:

The anticipated base salary range for this position is $86,000 - $92,000 annually

Actual compensation will be determined in good faith based on factors such as relevant experience, technical expertise, certifications, geographic location (where applicable), and internal equity. This position may also be eligible for bonus or other incentive compensation, as well as the benefits described below.

Who we are:

At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place.  We believe in inviting good people into our company who are driven to become great!

Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as mentors who believe “None of us are as smart as all of us” (R. Pelletier).

We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice,and we want you to use it.

Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.

What We Offer:

The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.

An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.

Some of the corporate benefits (there are more) for full-time employees include:

  • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan.
  • Time off: PTO, sick, holiday, & parental leave details are available

Although this is a remote role, if you live close by, you’ll have access to our office located in McLean, VA.

To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.

We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.

Read the full description
Security Security & Compliance Associate at Healthie

Supports security and compliance programs by coordinating controls, documentation, audits, risk management, and customer security requests.

Junior Posted 21 days ago RemoteFirstJobs Product
What this role involves

Our Mission

Healthie is an AI-Native, ONC Certified EHR for modern outpatient healthcare.

Healthie is proud to power clinically excellent healthcare for over 40,000 providers who deliver clinically excellent healthcare - longitudinal and collaboratively, with patient and provider experiences at the center. Both healthcare and technology are undergoing unparalleled industry innovation, and it’s incredible to see the momentum - from consumers, from providers, and from reimbursement for this type of healthcare - grow exponentially.

We provide the powerful infrastructure every care delivery organization needs. On the surface this includes EHR, Scheduling, Engagement, Billing, Data, and much more. Underneath the iceberg are thousands of configurations, settings, widgets, automations, and limitless capabilities because we are an API-first platform. Our fully brandable platform makes it easy for clinics and organizations of any size to scale and never reach a limit.

Today, over 3 billion API calls are made to Healthie every month, as thousands of organizations who work with more than 21 million patients in total, rely on Healthie to deliver clinically excellent healthcare in over 35 specialties, from behavioral healthcare to complex chronic care management and personalized medicine.

We believe in the power of technology to improve access to healthcare and we’re building the rails that make this a reality. We work fast and with quality because we provide business-critical, healthcare-critical software that clinicians and patients need for a better healthcare system. We’re customer-obsessed, operate with lightning-fast processes and responses, and always share our product roadmap publicly-  so customers can see what we’re building, and remain relentlessly focused on how care gets delivered.

Healthie is backed by leading investors, and while we’ve $42M raised to date, more importantly, we operate with fiscal responsibility and have been profitable for more than half of our time as a company. We know that building an ONC-Certified EHR is a lifetime’s body of work, and we are here to build for our customers forever.

Learn more at https://www.gethealthie.com/

About the role

As a Security and Compliance Associate, you’ll work closely with Healthie’s VP of Security and Compliance to help operate and strengthen the security and compliance programs that support our business, customers, and platform. This is a hands-on role for someone who is highly organized, detail-oriented, and comfortable owning work from intake through completion.

You’ll support third-party audits, assess vendor risk, respond to customer and internal security and compliance requests, and help keep the day-to-day work of the function moving. You’ll collaborate across technical and business teams and will be trusted to work with sensitive information, follow through on open items, and know when something needs to be escalated.

The work will include:

  • Helping with third party audits such as SOC 2, annual HIPAA assessment, and HITRUST, including gathering evidence and following-up on the artifacts that are missing
  • Assessing third party’s security risk, interacting with  vendors and driving remediation items to closure
  • Answering internal and customer questions regarding security and compliance
  • Answering security and compliance questionnaires from customers and prospective customers
  • Prioritizing incoming requests across multiple channels to security and compliance, and answering, escalating, or delegating them. Some of this is routing, and some is assigning compliance work to people senior to you and following up until it is done
  • Collaborating with other departments, primarily IT, Operations, Platform, R&D, and the offices of the CEO and CTO

What a week may look like: A few customer questionnaires, a vendor review or two, and evidence pulled for whatever audit is in flight. The queue gets cleared daily, including whatever Vanta  flags and the questions from other teams who are blocked until they get an answer. Audit season is the exception. When evidence requests land, that is the week.

Note that you will have access to some of the company’s most sensitive information, including data entrusted to our protection by customers and their clients. You must follow access rules exactly, raise your own mistakes before anyone else finds them, and keep confidence when it would be easier not to. Colleagues should be able to watch how you work and copy it.

This position might be suitable for someone with work experience in compliance and/or IT SOX work. But you might also be a fresh JD, BA, or MA that has an affinity for this kind of work in a dynamic, challenging, and exciting environment.

About you

  • You must be based in the United States. (The reason for this is that on occasion you may need to see protected health information [PHI], and our customers have contracts that forbid access to such information from outside the United States.)
  • You must be an excellent and fluent writer, speaker, and communicator in English. Those skills must be at least as good as any AI (in other words, you should be able to write, speak, and communicate without the aid of AI). You can compress a dense control requirement into two sentences a customer’s security team will accept, and document an exception so it still holds up when someone audits it next year.
  • You must understand or have an aptitude for the scope of the security and compliance challenges faced by a modern healthcare software company.
  • You must be adept with AI. You are not an expert, but you are able to write useful prompts that get answers to the questions you want. You are also skilled at identifying AI slop and wading through and correcting AI bloviation. You can spot when a model is confidently wrong, and you know when to rewrite it rather than pass it along.
  • You are interested in software, technology, and its impact on humans. You are curious and will ask why a control exists before you enforce it, creative at finding a workable answer when the framework doesn’t give you one, and empathetic enough to understand why the person on the other end of the request is frustrated. Healthie’s scope is quite large, and you will be asked to provide perspective with regard to how the technology fits with human expectations, both of Healthie’s customers, and the clients of Healthie’s customers.
  • You can hold a position with people more senior than you when the requirement is clear, and change it when someone gives you a better reason. You will be new to a lot of this and expected to ask early rather than guess.

Nice to Have

  • You are familiar with modern GRC tooling such as Vanta, Drata, SecureFrame, or Thoropass.
  • You are familiar with some of the regulatory frameworks in healthcare security and compliance: HIPAA, state level regulations, GDPR, the EU AI Act.
  • Any of CISA, CISM, CISSP, CIPP/US, CIPP/E. Note that this is not a requirement and a narrow professional background in these areas is not what we are looking for.

Details, details

  • This is a full-time, NYC-Hybrid position.
  • U.S. work authorization is required.
  • The salary for this position is a base between $100,000 - $130,000.

Interview Process

  • Quick chat with Katie from our Talent team (15 minutes)
  • Interview with John, VP Security & Compliance (30 minutes)
  • Talk with Edgar, Director of IT & Cindy, Director of People Operations: (30 minutes)
  • Interview with Sean, Staff AppSec Engineer(20 minutes)
  • Exec Interview with Cavan, CTO + cofounder (20 minutes)
  • Reference checks

Learn more at gethealthie.com/careers.

Healthie is subject to HIPAA and other security and privacy frameworks, and this job entails training and conformance to expectations regarding security and compliance.

Healthie participates in e-verify.

Healthie is committed to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. We’re proud to be building a diverse and inclusive environment that encourages collaboration, creativity, and growth. Whatever your background, please apply if this is a role that would make you excited to come into work every day.

Read the full description
Security Expel: Associate SOC Analyst

Investigates security alerts, hunts for threats, analyzes incidents, and helps customers remediate attacks in a managed detection and response SOC.

Junior Remote Posted 22 days ago We Work Remotely — Programming
What this role involves

Headquarters: Remote

You’ve got the spark, the curiosity that makes you ask “why?” when others move on. You love solving puzzles, learning new tools, and understanding how things work (and how they break). Maybe you’ve done some hands-on IT work, tinkered with packet captures, or even caught yourself reading about the latest exploits for fun. If that sounds like you, you might be exactly who we’re looking for.

At Expel, we protect customers by thinking like attackers. Our analysts investigate alerts, dig through data, and communicate findings with empathy and precision. As an Associate SOC Analyst, you’ll be on the front lines of our Managed Detection & Response (MDR) service, helping detect, analyze, and respond to threats across diverse environments from endpoint to cloud.

This is more than an entry point, it’s a launch pad. We’ll train you, mentor you, and help you grow from your first alert triage to full-scale investigations. You’ll learn from expert analysts who’ve seen it all (and lived to meme about it). You’ll refine your craft in real-world scenarios, protecting real organizations, and making a visible impact.

What Expel Can Do For You

  • Analyze and investigate alerts to identify, assess, and respond to potential threats.
  • Collaborate with teammates and customer security teams to remediate incidents and strengthen defenses.
  • Conduct threat hunts and root-cause analysis to uncover attacker activity.
  • Take ownership of alert triage through the entire lifecycle—from detection to resolution.
  • Constantly look for ways to improve how we detect, defend, and deliver for our customers.
  • Participate in 24x7 rotational coverage, because attackers don’t sleep.

What You Can Do For Expel (With the help of training, of course)

  • Get you out of theory and into real security operations.
  • Surround you with seasoned mentors who want to see you succeed.
  • Offer training, tools, and hands-on experience to accelerate your career.
  • Immerse you in a collaborative, growth-minded culture that values curiosity, communication, and creativity.
  • Provide transparent pay, unlimited PTO, flexible work, and up to 24 weeks parental leave.

What You Should Bring With You

  • Integrity, curiosity, and a client-first mindset.
  • Strong written communication, you can adapt tone and detail whether you’re messaging a teammate or writing a customer report.
  • A fundamental understanding of TCP/IP, operating systems, and common network protocols.
  • Experience with Windows, macOS, and Linux systems, including command-line familiarity.
  • Awareness of cloud applications (O365, Okta) and cloud infrastructure (AWS, Azure, GCP).
  • Familiarity with detection and response tools like SIEM, EDR, and IDS/IPS.
  • A curiosity about attacker techniques, the MITRE ATT&CK framework, and how defenders can outsmart them.
  • 1–2 years of IT or security experience is preferred, but if you’ve got passion, potential, and a compelling story, we want to hear it.

Additional notes

The base salary range for this role is between $85,000 USD and $90,000 USD + 20% bonus (paid out quarterly) & equity.

We believe in paying transparently and equitably. Your salary will ultimately be based on factors such as your experience, skills, team equity, and market data. You’ll also be eligible for unlimited PTO (which we model and encourage), work location flexibility, up to 24 weeks of parental leave, and really excellent health benefits.

We’re only hiring those authorized to work in the United States. We do not currently sponsor immigration visas.

We’re an Equal Opportunity Employer: You’ll receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

We’ll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any kind.

Salary Range$85,000—$90,000 USD

To apply: https://weworkremotely.com/remote-jobs/expel-associate-soc-analyst

Read the full description
Security Associate Services Architect

Supports the design and delivery of cybersecurity services and exposure management solutions for organizational clients.

Junior Posted 28 days ago Jobicy AI
What this role involves
Who is Tenable? TenableÂŽ is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent...
Read the full description