Security Analyst Intern

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world’s most productive and admired workforces.

OpenSesame seeks passionate, driven students to join us for a paid summer internship program. If you’re intelligent, curious, and full of fresh ideas, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.

As a Security Analyst Intern, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

2 Weeks

• Gain hands-on experience with GRC compliance tools such as Drata and security tools such as CrowdStrike.
• Learn how to leverage Claude and AI features for creating vulnerability dashboards and reports.
• Shadow team members to understand security and compliance workflows.
• Become familiar with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.

30 Days

• Assist in collecting and reviewing technical security evidence for audits and tracking.
• Support security initiatives, including phishing simulations, email security, and pen-testing programs.
• Learn compliance features of our SAST tooling for tracking and reporting vulnerabilities.
• Propose and develop workflow automations to streamline GRC and security operations.

60 Days

• Take ownership of assigned security projects, contributing independently to deliverables.
• Become comfortable owning several audit evidence collection tasks in Drata.
• Assist in analyzing vulnerability findings and tracking remediation efforts.
• Gain hands-on familiarity with AWS cloud security operations and vulnerability assessments.