IT Cybersecurity Co-op (Spring 2027)

Wave Life Sciences is a biotechnology company developing RNA medicines to transform human health. The Cybersecurity Co-op will support the IT Security team across threat monitoring, vulnerability management, identity and access initiatives, third-party risk assessments, AI/ML security, policy compliance, and security awareness programs.

What you'll do:

• Support the Security Operations Center (SOC) by monitoring alerts from CrowdStrike and other security platforms, investigating suspicious activity, and escalating incidents following defined playbooks
• Learn how to perform initial triage and enrichment of security events, document findings, and contribute to root-cause analyses
• Identify integration and ingestion points for security tools, focusing on improving telemetry and automation within the CrowdStrike platform and related systems
• Assist in scheduling, running, and reviewing vulnerability scans across endpoints, servers, cloud environments, and network infrastructure
• Track remediation efforts in collaboration with IT operations teams, ensuring patches and fixes are applied in a timely manner
• Help maintain reporting dashboards to communicate remediation progress, trends, and compliance against defined SLAs
• Participate in projects to advance Wave’s Zero Trust strategy, including implementation of passwordless authentication methods and biometric access controls
• Assist in reviewing role-based access control (RBAC) configurations to ensure least-privilege principles are consistently applied
• Contribute to documentation and testing for new identity governance initiatives, including access recertification and MFA expansion
• Support the evaluation of IT vendors and managed service providers (MSPs) by gathering documentation, reviewing security questionnaires, and scoring vendor cybersecurity posture
• Help maintain third-party risk registers, coordinate remediation plans with vendor contacts, and track progress against action items
• Learn how to leverage tools such as BlackKite to expand third-party risk insights and reporting

What they're looking for:

• Enrolled in a Computer Science or a related field bachelor's degree program at an accredited college/university
• Strong Windows OS background
• Strong written and verbal communication skills
• Must be well-organized and have the ability to work in a team environment
• Ability to manage responsibilities in a fast-paced environment
• Able to take direction needed to resolve incidents quickly and effectively
• Able to complete routine tasks independently over time. This includes gaining the functional, technical, and problem-solving skills needed to complete assignments
• A GPA of 3.0 or higher is preferred