Security Analyst Internship

Security Analyst Internship

About OpenSesame

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world's most productive and admired workforces.

Internship Overview

OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.

As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

Two Weeks

• Gain hands-on experience with GRC compliance tools such as Drata and security tools such as Crowdstrike.
• Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
• Shadow team members to understand security and compliance workflows.
• Become familiar with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.

30 Days

• Assist in collecting and reviewing technical security evidence for audits and tracking.
• Support security initiatives, including phishing simulations, email security, and pen-testing programs.
• Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
• Propose and develop workflow automations to streamline GRC and security operations.

60 Days

• Take ownership of assigned security projects, contributing independently to deliverables.
• Become comfortable owning several audit evidence collection tasks in Drata.
• Assist in analyzing vulnerability findings and tracking remediation efforts.
• Gain hands-on familiarity with AWS cloud security operations and vulnerability assessments.

Additional Program Details

Eligibility

• Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)

Program Dates

• Projected Start Date: Tuesday, November 17, 2026
• Projected End Date: Friday, April 9, 2027

Commitment

• Full-time (32 to 40 hours/week) for 20 weeks
• Must commit to working regular office hours in the US continental time zones (e.g. from 9 AM EST to 5 PM EST or 9 AM PST to 5 PM PST within Monday to Friday period)

Compensation

• Standard: $18/hour

Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.

Location

• This position can be based anywhere in the U.S.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

We Care About Your Security: We’ve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from an OpenSesame domain. If you receive a suspicious message, please contact us directly. Your security matters to us, thank you for staying vigilant.