{"id":443367,"url":"https://alion.io/job/sky-mavis-security-operations-intern","title":"Security Operations Intern","company":{"id":47546,"name":"Sky Mavis","domain":"skymavis.com","url":"https://alion.io/company/sky-mavis","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"intern","employment_type":"internship","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ho Chi Minh City, Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":6500,"max_usd":9500,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":9},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitcoin","optional":false},{"name":"Ethereum","optional":false},{"name":"Git","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"NFT","optional":false},{"name":"NIST CSF","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PostgreSQL","optional":false},{"name":"React.js","optional":false},{"name":"Rest API","optional":false},{"name":"Ronin","optional":false},{"name":"SOC 2","optional":false},{"name":"Solana","optional":false},{"name":"Solidity","optional":false},{"name":"SQL","optional":false},{"name":"TypeScript","optional":false},{"name":"Ethers.js","optional":true},{"name":"GoPhish","optional":true},{"name":"Hardhat","optional":true}],"status":"live","first_seen_at":"2026-08-18T13:34:07Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-10-30T13:03:06Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"About Sky Mavis\nSky Mavis is building the future of gaming. We’re the creators of Axie Infinity, the most successful Web3 game ever, and Ronin, a purpose-built blockchain that ranked as the 4th most-used chain in 2024, behind Ethereum, Bitcoin, and Solana.\nWe’ve processed over $4.3 billion in on-chain volume and are backed by more than $170 million from top-tier investors, including a16z, Accel, Libertus Capital, and Paradigm.\nOur team moves fast, builds with intention, and believes in a world where players truly own what they earn. If you’re excited by open economies, massive scale, and shaping new digital frontiers, join us.\nAbout the Role\nWe are replacing our commercial third-party security awareness training vendor with an in-house platform. This internship sits at the intersection of security operations and software delivery. You will own the security awareness training program end-to-end: designing the training content and quiz bank, building and deploying the platform that delivers it (the architecture and specifications are already fully documented, and you'll work with AI-assisted development tooling under senior guidance), and then running it as an operational security program - enrollments, completion tracking, and audit-ready reporting.\nYou'll leave with something few interns get: hands-on experience running a real security awareness program for a whole company, plus the platform you shipped to production to run it on.\nWhat You’ll Do\nSecurity awareness program (primary focus)\nDesign and author the security awareness training curriculum: modules and quiz banks covering phishing and social engineering, password and MFA hygiene, data handling and classification, secure remote work, and Web3-specific threats (wallet security, seed phrase protection, approval scams, fake dApps).\n\nMap each training module to the compliance requirements it satisfies (SOC 2 CC1/CC2, ISO 27001 A.6.3 awareness controls) so auditors can trace evidence to controls.\n\nOperate the training program day-to-day: enroll employees, configure module deadlines and renewal cycles, monitor completion rates, and chase stragglers with the People team.\n\nProduce audit-ready reporting: completion evidence exports, on-chain verification links for auditors, and periodic metrics for the security team (completion %, average scores, weakest topics).\n\nUse quiz analytics to find knowledge gaps and iterate on content - treat awareness as a measurable security control, not a checkbox.\n\nDocument program runbooks (onboarding a new hire, adding a module, annual renewal campaign, audit evidence collection) so the program survives beyond the internship.\n\nPlatform delivery (the tool you'll run the program on)\nImplement the platform from the existing specification under senior review: Solidity contracts (completion tracker + soulbound certificate NFT), Express/TypeScript/PostgreSQL backend with server-side quiz scoring and signed attestations, and the React frontend (module player, quiz flow, dashboards, admin analytics, public certificate verification).\n\nTest and harden it: contract tests (100% must pass), backend integration tests, and the project's mandatory security-audit and business-logic checks before every PR - zero Critical/High findings before deploy.\n\nDeploy, then support.\n\nWhat We Look For\nFinal-year student or recent graduate in Information Security, Computer Science, or a related field (or equivalent practical experience).\n\nSolid security fundamentals: common attack vectors (phishing, social engineering, credential theft, malware delivery), basic OWASP Top 10 awareness, and why the human layer is a primary attack surface.\n\nGenuine interest in security awareness and security operations: you can explain what makes training effective versus checkbox compliance, and you care about measuring behavior change, not just completions.\n\nFamiliarity with a compliance or control framework (SOC 2, ISO 27001, NIST CSF)\n\nWorking programming ability in TypeScript/JavaScript (Node.js, REST APIs, basic SQL, basic React) - enough to implement from a detailed specification with senior review and AI-assisted tooling. This is a build-and-operate role, not a research role.\n\nStrong written communication: you will author training content and audit documentation that non-technical employees and external auditors will read.\n\nInterest in Web3 security - wallet threats, on-chain verification - with motivation to learn Solidity basics quickly (prior experience not required).\n\nUnderstanding of Git workflows (branching, pull requests, code review).\n\nNice to Have\nSecurity research/hand-on or Blue CTF experience.\n\nPrior exposure to an awareness training or phishing-simulation platform (e.g., KnowBe4, GoPhish) as an admin or content author.\n\nExperience with SOC/security operations tooling, or contributing to audit evidence collection.\n\nExposure to Solidity, Hardhat, ethers.js, or any EVM chain (Ronin is a plus).\n\nExperience creating instructional content (slides, videos, quizzes) or running internal campaigns.","description_format":"text","description_chars":5033,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cryptocurrencies","Blockchain Infrastructure","Game Development","GameFi"],"lifecycle":[{"event":"open","at":"2026-09-06T07:33:55Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.397,"p_room":0.28,"age_days":72,"expected_fill_days":27,"reasons":["conf:1","win:tail","crowd:junior"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/sky-mavis-security-operations-intern","json_url":"https://alion.io/job/sky-mavis-security-operations-intern.json","meta":{"generated_at":"2026-10-30T15:50:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3746,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47546},"rest":"https://alion.io/mcp/rest/get_company?id=47546"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsky-mavis-security-operations-intern"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsky-mavis-security-operations-intern"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsky-mavis-security-operations-intern"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sky-mavis-security-operations-intern\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsky-mavis-security-operations-intern"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":443367}},{"tool":"search_jobs","arguments":{"company":"skymavis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":443367},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}