← Back to jobs

Security Intern, Threat Operations - Winter 2027

1password

Remoto Remote (United States | Canada)
Uncategorized

Job Score

90 pts
Remote model (+90)

1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.

About 1Password

At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.

If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.

Threat Operations is part of 1Password’s Security organization, bringing together Cyber Threat Intelligence, Detection Engineering, and Security Incident Response. Together we study how threat actors operate, turn that into high-quality detections, and respond quickly when something goes wrong. Interns work across all three teams, with time and focus shaped by your interests and our needs, so you see how intelligence becomes real defense. We care about turning intelligence into action, and we value blameless learning and psychological safety.

This is a remote opportunity within Canada/US. This position will be for 4 months - January to April 2027.

What You Can Expect:

  • Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run IOC sweeps across our environment.

  • Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.

  • Join the alert triage rotation and learn how signal quality, enrichment, and response fit together.

  • Develop and test detection rules and response agents, and contribute to our detection-as-code and response-as-code platforms.

  • Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help design and build them.

What we're looking for:

  • Confidence: A willingness to take on new challenges, and see them through to completion.

  • Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from them).

  • Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are.

  • Teamwork: We work together, and succeed as a team!

Bonus points for:

  • Familiarity with Git and managing infrastructure or detections as code, including Terraform.

  • Scripting or programming experience, such as Python or Go, and comfort working with APIs.

  • Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries, through coursework, labs, or projects.

  • Experience using AI tools to build or automate workflows, with a healthy skepticism about their output.

  • Familiarity with frameworks like MITRE ATT&CK, plus security coursework, CTFs, home labs, or a security club.

Our culture 
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. 

You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. 

We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged at 1Password—it's an essential part of how we will be successful at 1Password.

Our approach to remote work 
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of most roles. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. 

How we’re using AI today

Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.


What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: 

🏝 Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term)
💖 Company-wide wellness days (1 per quarter) 
🌎 Employee-led inclusion and belonging programs and ERGs
🏠 Remote-first environment
🏆 Peer-to-peer recognition through Bonusly
💡 1Password University access and learning sessions
🥳 Monthly internship events and socials

1Password is part of  Team True North , a comprehensive group of Canadian tech firms with performance and growth rates that match the top 1% of companies worldwide – companies with the highest probability of reaching $1 billion in annual revenue. We believe in tech for good, and establishing Canada as a preferred destination for growing careers wherever we can!

You belong here.

1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.

Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.

Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.

Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.

1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form. For additional information see our Candidate Privacy Notice.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Finance

The Finance area in technology companies combines traditional financial knowledge with advanced digital tools. FP&A, controlling, and corporate finance professionals are essential for the organization's financial health.

Key skills include financial modeling, metrics analysis (MRR, ARR, LTV, CAC), ERP (SAP, Oracle), and BI tools. Certifications like CFA and CPA-20 are differentiators.

The financial sector offers stable opportunities with competitive salaries, especially in fintechs and large technology companies.

About Web3

The Web3 area represents the new phase of the decentralized internet, built on blockchain technology. Web3 professionals create decentralized applications (dApps), interact with smart contracts, manage digital assets (cryptocurrencies and NFTs), and utilize DeFi (Decentralized Finance) protocols, revolutionizing how data, ownership, and finance are managed online.

About Audiovisual

The Audiovisual area is responsible for producing, editing, and creating video and audio content for various platforms. With the exponential growth of digital content, audiovisual professionals are fundamental for brands that want to communicate visually and impactfully.

Key skills include video production and editing (Premiere Pro, DaVinci Resolve, Final Cut), motion graphics (After Effects), animation (Blender, Cinema 4D), sound design, podcast production, live streaming (OBS Studio), and photography. Knowledge of visual storytelling, rhythm, and art direction is a differentiator.

Audiovisual professionals in technology companies are highly valued, especially those who master motion graphics, social media videos, and content for digital platforms. The field offers opportunities from videomaker to head of audiovisual, with a focus on creativity, technical quality, and storytelling.

About Blockchain

The Blockchain area involves the development and implementation of secure and distributed transaction ledgers. Professionals in this field work with smart contract development, cryptography, consensus algorithms, and platforms such as Ethereum, Hyperledger, and Solana, ensuring security and decentralization for various types of applications.

About Business Analysis

The Business Analyst (BA) is the professional responsible for identifying problems, opportunities, and solutions in organizational processes, acting as a bridge between business areas and the technology development team. They gather and specify requirements, map value streams, design future processes, and help ensure that software deliveries align with the company's strategic goals.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

Agile and Project Management in Today's Market

1. Move Beyond "Doing Agile": Deliver Real Value

One of the biggest mistakes candidates make in interviews for Agile roles is focusing too much on ceremonies (Dailies, Plannings, Retrospectives) and forgetting their actual purpose. Recruiters from global tech companies want to know how you eliminated bottlenecks and boosted team efficiency.

"True Agile success isn't measured by how many practices you implement, but by how much value you deliver to the customer and how quickly you do it."

Instead of writing "facilitated Scrum ceremonies" on your resume, use a results-driven approach: "Reduced team Cycle Time by 20% by identifying and removing bottlenecks in the value stream."

2. Certifications That Actually Bypass the ATS

While practical experience is the ultimate deciding factor, Applicant Tracking Systems (ATS) used by top US companies (like Greenhouse, Ashby, and Workday) filter resumes strictly through keywords. Holding the right certifications ensures you pass this first robotic barrier and get your profile in front of a human recruiter.

  • Professional Scrum Master (PSM I, II) by Scrum.org: Highly respected because it doesn't require renewal and features a rigorous, Scrum Guide-based exam.
  • Project Management Professional (PMP) by PMI: The gold standard for traditional, predictive, and hybrid Project Management.
  • PMI Agile Certified Practitioner (PMI-ACP): Excellent for demonstrating broad knowledge across multiple Agile frameworks (Scrum, Kanban, Lean).
  • SAFe (Scaled Agile Framework): Absolutely essential if you are targeting Enterprise-level corporations that have scaled Agile across thousands of employees.

3. Mastering Flow Metrics and Tools (Hard Skills)

The modern Agile professional must be data-driven. Companies offering six-figure compensation expect you to extract actionable insights from tools like Jira, Confluence, or Azure DevOps.

During technical interviews, be prepared to discuss how you utilize flow metrics, such as:

  • Lead Time and Cycle Time: To measure efficiency and the actual time it takes to deliver requests.
  • Throughput: The number of work items completed in a given timeframe.
  • Cumulative Flow Diagram (CFD): To visually identify bottlenecks in the workflow.
  • OKRs (Objectives and Key Results): To align the development team's daily work with the company's high-level strategic goals.

4. Soft Skills and Conflict Resolution in Async Teams

In global, remote-first, and asynchronous environments, communication is the biggest challenge. A top-tier Project Manager or Scrum Master acts as a shield for the tech team and a bridge for stakeholders.

Demonstrate emotional intelligence, empathy, and negotiation skills. You will often face situational questions like: "How would you handle a Product Owner who constantly changes the Sprint scope mid-cycle?" Your answer should highlight peaceful, data-driven negotiation focused on business impact and team predictability.

Conclusion: Your Competitive Edge

To land premium Project Management and Agile roles, you must position yourself as a strategic business partner, not just a process enforcer. Understand the product, master the metrics, and know how to guide people towards continuous improvement.

References & Useful Links