Spring & Summer 2027 Intern - Security & GRC

Workiva is a company providing a secure platform for finance, risk, and sustainability management. The Security Intern will support information security operations by investigating incidents, developing security and compliance tools, testing web application vulnerabilities, analyzing security data, and collaborating on remediation strategies.

What you'll do:

• Provide Incident Response support when an actionable incident is confirmed
• Document, investigate, and report on information security issues and emerging trends
• Manage and configure tools and devices to expand our security monitoring infrastructure
• Develop tools to assist with security and compliance tasks
• Assist with continual vulnerability testing of web applications to identify weaknesses
• Research and identify potential security controls to fix active vulnerabilities
• Collaborate with other teams to create remediation strategies and timelines for vulnerabilities
• Develop queries and visualizations to assist with security and compliance tasks
• Help solve security issues identified in the production application
• Provide analysis and trending of security log data from a large number of various security devices
• Collaborate with other teams to gather information regarding security problems, issues, and ideas

What they're looking for:

• Currently enrolled in a degree-seeking program, preferably in Computer Engineering, Computer Science, Management Information Systems, or a similar degree
• Minimal travel
• Reliable internet access for any period of time working remotely and not in a Workiva office
• Strong ethical and discretionary ability to handle sensitive information and data
• Strong communication and networking skills (written, verbal, listening)
• Basic competency in one or more programming languages (Python, Java, SQL, Go, and/or Dart)
• Familiarity with vulnerability scanning tools and/or penetration testing techniques
• Familiarity with Amazon Web Services (AWS) and/or Google App Engine (GAE)
• Working knowledge of Linux/Unix operating systems
• If Security Engineering focused: Ability to analyze problems and devise creative solutions within business constraints; good understanding of HTTP and common web application vulnerabilities
• If Security Operations focused: Self-motivation and initiative skills to search for and resolve security issues; initiative and social skills to network with technical individuals to gather information on projects

Benefits:

• 401(k) participation and match
• Paid sick leave
• A unique opportunity to further your learning experience through additional internship seasons
• Primarily a remote opportunity, with the option to work in a hybrid capacity and utilize office spaces if located near an office hub
• Support for working where employees work best, either from an office or remotely from any location within their country of employment