Security, Privacy & GRC - Security
IT Security Engineering Intern
Intern
Independently auditedProtects the company's systems, data, and customers from real adversaries. Works on well-scoped, supervised pieces of real work, reviewed before anything ships.
Audited package
Built, independently audited role package. Everything on this page is written for this seat.
Your Stack (Swappable)
This role works against whatever tools you already run. We list the tool categories the role operates in, never a named vendor, so you are never asked to replace a system that works.
- Endpoint & Device (MDM/UEM)
- Identity & Access (SSO/IAM)
- Email security
- IT Ops (RMM/Asset/Backup)
- ITSM / Service Desk
- Test device / non-prod
Deliverables
- Detection rules and tuning notes
- Risk and architecture reviews
- Incident write-ups
- Control evidence packs
Responsibilities
- Assist with device enrollment and endpoint/MDM hardening on a pilot device first, under review
- Run access-hygiene and MFA checks (least privilege, stale accounts, joiner/mover/leaver hygiene) and flag exceptions to a mentor
- Support email/phishing defenses - triage reported messages to the right owner, help maintain basic controls
- Help keep the fleet patched: track patch status, stage updates to a pilot ring, escalate anything user-impacting
- Draft device-hardening checklists, access reviews, and user-facing change comms for a mentor to review
- Document what was done - runbook notes, tickets, and learning notes - clearly enough for the next person
- Escalate early: any identity/MFA change, anything affecting many users or production, and any real security signal
The essence of this seat
The IT Security Engineering Intern is an early-career, supervised member of the IT team learning to secure the corporate IT environment - the laptops and phones employees carry, the identity/login layer, email, and the applications and network the workforce uses every day.
Signature move
Scope-check before you act. The first move on any task is to confirm it is inside the boundary your mentor set and that it is safe to do solo. The moment it touches identity/MFA, many users, production, or a real security signal (a phishing report, a compromised account), stop and ask first - that is the default, not the exception
What good looks like
understands each control before applying it; names blast radius and rollback in writing; pilots on one device and verifies it before going wider; brings the plan and pilot to a mentor for review rather than rolling fleet-wide solo; documents for repeatability - all at supervised-intern altitude
Decision rights
- - how you approach a well-scoped assigned task, your learning notes, and drafts you bring for review
Working vocabulary
What this role does
The IT Security Engineering Intern is an early-career, supervised member of the IT team learning to secure the corporate IT environment - the laptops and phones employees carry, the identity/login layer, email, and the applications and network the workforce uses every day. Working alongside IT engineers and helpdesk, they help enroll and harden devices, keep access and MFA hygiene clean, support email/phishing defenses, and assist with patching the fleet. This is not an independent-contributor role: work is scoped by a mentor, reviewed before it goes wide, and chosen partly for what it teaches. It is distinct from the Security Engineering Intern (who builds detections and tooling on the security team) by its IT-operations leaning - endpoints, identity, patching, helpdesk-adjacent security. What separates a great intern from an average one is judgment and reliability, not output volume: careful in-scope work, well-timed questions, understanding why a control exists before changing it, piloting on one device before touching many, and steadily earning the trust to own more.
Best-fit customer
security teams that need consistent triage, review, and evidence quality
Need more than one role?
Buying the whole team or the complete department lowers your effective cost per role at every tier of the ladder.