Security Intern (Remote) at ezCater in Remote

Summary: ezCater is the leading food for work technology company in the US, connecting anyone who needs food for their workplace to over 100,000 restaurants nationwide. They are seeking a Security Engineering & Compliance Intern to assist in designing and implementing security solutions while learning about risk management and compliance frameworks. Responsibilities: - Learn about our users, systems, and security posture, and how security enables our product and business goals - Support security assessments of code and infrastructure changes with guidance from Security Engineers, helping ensure alignment with SOC 2, PCI-DSS, and internal policies - Assist with automating recurring security and compliance activities such as vulnerability scanning, risk assessments, third-party risk reviews, and control validation - Help create and tune monitoring and detective alerts for security operations, non-compliance, and incident response, using our security tools and dashboards - Contribute to maintaining a healthy posture of our security tools and automations by helping with configuration, troubleshooting, and documentation - Assist with collecting, organizing, and reviewing audit evidence for SOC 2 - Participate in security incident response exercises and post-incident reviews, learning how we investigate and mitigate security events - Collaborate with partners across Technology, Product, Analytics, and IT to support small, scoped projects that reduce risk and improve our security posture - Have fun building meaningful, pragmatic security solutions with kind and smart people Required Qualifications: - Currently pursuing a degree in Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience - Familiarity (through coursework, projects, or self-study) with one or more of: security engineering, cloud platforms, networking, or operating systems - Some experience with at least one programming or scripting language (e.g., Python, Go, Ruby, JavaScript) and an interest in leveraging APIs to automate workflows - Interest in risk management and compliance frameworks (e.g., SOC 2, PCI-DSS) and how they translate into technical and operational controls - Comfort gathering and analyzing data, and summarizing findings clearly for both technical and non-technical audiences - Strong written and verbal communication skills, with the ability to present your work and recommendations to a variety of stakeholders - A collaborative, curious, and pragmatic mindset — you enjoy asking questions, learning from others, and iterating based on feedback - A continuous learning mindset to stay current with the latest security trends, threats, and technologies - Soft skills that are as well developed as your technical skills, and a willingness to challenge existing norms and help make things better than they are today Required Skills: Security engineering, Risk management, Compliance frameworks Important Skills: Programming languages, Cloud platforms Nice-to-Have Skills: Collaborative mindset, Continuous learning Benefits: Market competitive salary, Stock options that you’ll help make worth a lot, 12 paid holidays, Flexible PTO, 401K with ezCater match, Health/dental/FSA, Long-term disability insurance, Mental health and family planning resources, Remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office, A tremendous amount of responsibility and autonomy, Wicked awesome co-workers, Relish (and many more goodies) when you’re in our office