{"id":3369536,"url":"https://alion.io/job/filevine-security-specialist-intern","title":"Security Specialist, Intern","company":{"id":1213,"name":"Filevine","domain":"filevine.com","url":"https://alion.io/company/filevine","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":80,"open_postings":118,"ghost_share":0.254,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":106,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Early Careers","role_family":"Early Careers","seniority":"intern","employment_type":"internship","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Salt Lake City, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":85000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"Security Onion","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Wireshark","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Confluence","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Jira","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-27T20:20:17Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-28T14:26:20Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"Department Statement: The Information Security team is responsible to ensure the SOC efforts are effective and aligned with industry standards and best practices. Interns are treated as contributing members of the team and are paired with an experienced analyst for coaching, ticket review, and career guidance.\nJob Summary\nFilevine is looking for a Security Specialist - Intern to join our Information Security team. This is a paid, mentored internship for early-career candidates building toward a career in cybersecurity, whether through an academic program, a certification track, or self-directed, demonstrable hands-on experience, who want real-world experience defending a modern cloud-based software platform. Working alongside our Security Specialists, you will help monitor our environment, triage security alerts, investigate suspicious activity, and improve the documentation and automation that keep the SOC running. You will finish the internship with practical experience across the alert lifecycle, a completed capstone project, and a clear picture of what a career in security operations looks like. If you are curious, detail-oriented, and enjoy solving puzzles, we want to talk to you.\nResponsibilities\nMonitor security alerts and events in the SIEM, endpoint detection and response (EDR), email security, and cloud security tools under the guidance of Security Specialists.\n\nPerform initial (Tier 1) triage of alerts: gather context, determine whether an alert is a true positive, false positive, or benign, document findings, and escalate per SOC runbooks.\n\nWork the SOC ticket queue: keep tickets accurate and up to date, track investigations to closure, and communicate status clearly to the team.\n\nInvestigate employee-reported phishing emails: analyze headers, links, and attachments in a sandbox, help block malicious indicators, and assist with user notifications.\n\nAssist with vulnerability management by reviewing scan results, helping validate findings, and tracking remediation with system owners.\n\nHelp tune detections and reduce alert noise by identifying recurring false-positive patterns and proposing rule adjustments.\n\nReview threat intelligence and vendor advisories, summarize what is relevant to Filevine, and help map observed activity to the MITRE ATT&CK framework.\n\nSupport incident response activities as directed, including evidence collection, timeline building, and note-taking during active incidents.\n\nCreate and improve SOC documentation: runbooks, playbooks, knowledge base articles, and onboarding guides.\n\nComplete a capstone project (for example, building a new detection, automating a triage step with a script, or improving a playbook) and present the results to the Security team at the end of the internship.\n\nWhat You Will Learn\nHow an enterprise SOC operates day to day: the alert lifecycle, escalation paths, incident handling (aligned to NIST SP 800-61), and the metrics used to measure a SOC.\n\nHands-on use of production security tooling, including a SIEM, EDR, email security, identity and access management, and cloud security platforms.\n\nPractical investigation skills: log analysis, phishing analysis, basic malware triage, and writing clear, defensible investigation notes.\n\nHow security operations supports compliance obligations (for example, SOC 2 and customer security requirements) in a legal technology company that handles sensitive client data.\n\nProfessional skills: working a queue, communicating with engineers and non-technical stakeholders, and receiving structured feedback from a dedicated mentor.\n\nQualifications\nPursuing a career in cybersecurity or a related technical field through a degree program, certification track, bootcamp, or self-study. Formal enrollment is not required; demonstrable experience (a documented home lab, CTF results, open-source contributions, or prior IT, help desk, compliance or system administration work) is equally welcome.\n\nWorking knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, common ports and protocols), operating systems, and introductory security concepts, gained through coursework, certifications, or hands-on experience.\n\nFoundational understanding of common attack techniques (phishing, malware, credential abuse, privilege escalation, lateral movement) and the defensive controls that counter them.\n\nHands-on exposure to security tools through coursework, labs, competitions, a home lab, or prior work, such as Wireshark, Nmap, a SIEM (Splunk, Elastic, Microsoft Sentinel, or similar), or Security Onion.\n\nStrong written and verbal communication skills, including the ability to document technical findings clearly and concisely for both technical and non-technical readers.\n\nCuriosity, attention to detail, sound judgment, and a willingness to ask questions and learn from feedback.\n\nDemonstrated integrity and the ability to handle confidential information with discretion.\n\nAble to commit to the stated weekly schedule for the duration of the internship.\n\nPreferred Qualifications\nProgress toward a security or IT certification such as CompTIA Security+, Network+, CySA+, or GIAC GFACT / GSEC - started, in progress, or planned.\n\nAny self-directed security learning: Capture the Flag (CTF) events, collegiate competitions (for example, CCDC or National Cyber League), a campus security club, a home lab, online labs such as TryHackMe or Hack The Box, or a security-focused course sequence.\n\nAwareness of common security frameworks - MITRE ATT&CK, the NIST Cybersecurity Framework, or NIST SP 800-61 incident handling guidance. Classroom-level familiarity is enough; we will teach the rest.\n\nAny exposure to cloud platforms (AWS, Azure, or GCP) or identity providers (Okta, Microsoft Entra ID, or similar), including coursework, a free-tier account, or administering accounts in a prior job.\n\nComfort with ticketing, tracking, or documentation tools such as Jira, Confluence, ServiceNow, or a GRC/audit platform.\n\nBackground in compliance, audit, risk, privacy, or a similar control-oriented role - including SOC 2, ISO 27001, or HIPAA work - and an interest in moving toward the technical side of security.\n\nGenuine enthusiasm for the field - following security news, podcasts, or write-ups, and able to talk about a breach or technique that caught your interest.\n\nInternship Perks\nPaid internship with competitive hourly compensation\n\nDedicated mentor and structured learning plan for the duration of the internship\n\nReal production experience and a capstone project to showcase in future interviews\n\nPotential pathway to a full-time Jr. Security Specialist - Tier 1 role for high performers\n\nOpen office working atmosphere\n\nLaptop provided for the duration of the internship","description_format":"text","description_chars":6720,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Legal Software"],"lifecycle":[{"event":"open","at":"2026-10-28T00:24:39Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":82500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":106,"reasons":["conf:0","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/filevine-security-specialist-intern","json_url":"https://alion.io/job/filevine-security-specialist-intern.json","meta":{"generated_at":"2026-10-28T14:32:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2901,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1213},"rest":"https://alion.io/mcp/rest/get_company?id=1213"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffilevine-security-specialist-intern"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffilevine-security-specialist-intern"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffilevine-security-specialist-intern"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/filevine-security-specialist-intern\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffilevine-security-specialist-intern"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3369536}},{"tool":"search_jobs","arguments":{"company":"filevine.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3369536},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}