Security Analyst Intern

Securin is expanding its team of offensive security analysts focused on hunting and mitigating extreme risks in digital ecosystems, AI systems, and future AI models. The role involves executing offensive assessments and attack validation across customer environments to enhance security posture.

What you'll do:

• Offensive Security Assessments: Perform security assessments ranging from Red Team operations, threat-based evaluations, and vulnerability research and exploitation against both the unique systems and technologies used by our customers, as well as approved 3rd party software, open-source software, and vendors
• Security Guidance: Provide threat-based guidance and education to our customers and internal teams through offensive security, with audiences including software engineers, business and technical leaders
• Collaborate with teams to influence measurement and mitigation of discovered vulnerabilities
• Research new and emerging threats to inform the organization including prompt injection, improve red teaming efficacy and accuracy, and stay relevant
• Discover and exploit vulnerabilities end-to-end in order to assess the security of AI systems
• Execute Red Team operations on production AI systems using real world adversarial tactics and techniques to identify failures
• Adversary TTPs: Research, develop, and execute adversary TTPs across the range of the attack lifecycle
• Develop tools and techniques to scale and accelerate offensive emulation and vulnerability discovery specific for AI systems in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection

What they're looking for:

• Bachelor's or Master's degree in Computer Science or Computer Engineering
• Proven understanding of the attack lifecycle, and offensive security concepts in at least one of the following: Red Team operations, Purple Team engagements, Vulnerability Research, and/or Exploitation
• Experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, or adversarial machine learning
• Experience with exploiting common security vulnerabilities and bypassing security controls
• Demonstrated impact in Application Security, Penetration Testing, or other related field
• Experience using penetration testing tools, including any of the following: Nessus, NMAP (Network Mapper), Metasploit, Burp Suite Pro, etc
• Coding skills, in any of the following languages: C#, Python, C/C++, Go, PowerShell, ASP.NET, JavaScript
• Knowledge of server (Linux, Windows) and client (Windows, macOS, Linux) operating systems
• Must obtain work authorization in country of employment at the time of hire, and maintain ongoing work authorization during employment
• OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert), or similar certifications
• Track record of participation in capture the flag (CTF) competitions
• Contributions to the security community (public research, blogging, presentations, bug bounty, tooling, etc.)

Benefits:

• Work on impactful projects that contribute to protecting critical systems and data.
• Learn from a diverse and skilled team of red teamers, researchers, and developers.
• Access to educational resources and mentorship to build your cybersecurity skills.
• Opportunity to make meaningful contributions and gain exposure to the cybersecurity industry.
• Duration: 1 year
• Work Arrangement: Onsite
• Locations: Albuquerque, NM, United States