Security Intern, Threat Operations

About this role

📋 Description Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run Own pieces of work across the threat management lifecycle, turning intel into recommendations for Join the alert triage rotation and learn how signal quality, enrichment, and response fit together. Develop and test detection rules and response agents, and contribute to our detection-as-code and Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help 🎯 Requirements Confidence: A willingness to take on new challenges, and see them through to completion.

Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are. Teamwork: We work together, and succeed as a team! Familiarity with Git and managing infrastructure or detections as code, including Terraform. Scripting or programming experience, such as Python or Go, and comfort working with APIs.

🎁 Benefits Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) Company-wide wellness days (1 per quarter) Employee-led inclusion and belonging programs and ERGs Remote-first environment Peer-to-peer recognition through Bonusly 1Password University access and learning sessions

Source listing: empllo_remote