ZipRecruiter

Log In

2

Remote Threat Intelligence Internship Jobs (NOW HIRING)

Cyware

Threat Intelligence Engineer (REMOTE)

$52.25 - $67.75/hr

The Threat Intelligence Engineer is someone with real threat intelligence depth and the technical ability to understand threat feeds' data model and map it correctly to STIX 2.1, who uses AI to make ...

Cyware

Threat Intelligence Engineer (REMOTE)

OR · On-site +1

$51 - $66.25/hr

The Threat Intelligence Engineer is someone with real threat intelligence depth and the technical ability to understand threat feeds' data model and map it correctly to STIX 2.1, who uses AI to make ...

next page

Showing results 1-20

All JobsThreat Intelligence JobsRemote Threat Intelligence Internship Jobs

Remote Threat Intelligence Internship information

What is a remote threat intelligence internship?

A Remote Threat Intelligence Internship is an entry-level position where interns work from a remote location to assist organizations in identifying, analyzing, and mitigating cyber threats. Interns typically gather and assess data from various sources to detect potential security risks and report their findings to security teams. The internship offers hands-on experience in cybersecurity, research, and analytical skills, often under the guidance of experienced professionals. It is a valuable opportunity for students or recent graduates interested in cybersecurity to gain practical knowledge while working from anywhere.

What is the difference between Remote Threat Intelligence Internship vs Remote Cybersecurity Analyst?

AspectRemote Threat Intelligence InternshipRemote Cybersecurity Analyst
Required CredentialsTypically pursuing or recent graduate in cybersecurity, IT, or related fieldsBachelor's degree in cybersecurity, computer science, or related; certifications like CompTIA Security+ often preferred
Work EnvironmentInternship, often part-time or temporary, focused on learning and support tasksFull-time or part-time, responsible for ongoing security monitoring and incident response
Employer & Industry UsageUsed by cybersecurity firms, tech companies, and government agencies for entry-level rolesCommon in organizations with dedicated security teams across industries

The Remote Threat Intelligence Internship is an entry-level, learning-focused role ideal for students or recent graduates, while the Remote Cybersecurity Analyst is a more advanced position with ongoing responsibilities in security monitoring and incident management. Both roles are essential in cybersecurity but differ in experience level and scope.

What are some common challenges faced during a remote threat intelligence internship, and how can interns effectively overcome them?

Remote threat intelligence interns often face challenges such as limited in-person mentorship, difficulty accessing sensitive data securely, and staying up-to-date with rapidly evolving cyber threats. To overcome these, it's essential to proactively communicate with team members through regular virtual check-ins, make use of secure collaboration tools, and participate in ongoing training or webinars. Additionally, setting a structured daily routine and seeking feedback can help interns stay engaged and make meaningful contributions to their team.

What are the key skills and qualifications needed to thrive as a remote threat intelligence intern?

To thrive as a Remote Threat Intelligence Intern, you need a foundational understanding of cybersecurity concepts, analytical thinking, and ideally some coursework or experience in computer science or information security. Familiarity with threat intelligence platforms, SIEM tools, and certifications like CompTIA Security+ or basic cyber threat analysis courses are often beneficial. Strong written communication, attention to detail, and the ability to work independently help interns stand out in a remote environment. These skills are vital for accurately assessing threats, collaborating with teams remotely, and contributing valuable insights to strengthen organizational security.
More about Remote Threat Intelligence Internship jobs

What cities are hiring for Remote Threat Intelligence Internship jobs?

Cities with the most Remote Threat Intelligence Internship job openings:

What are the most commonly searched types of Remote Threat Intelligence jobs?

The most popular types of Remote Threat Intelligence jobs are:

What states have the most Remote Threat Intelligence Internship jobs?

States with the most job openings for Remote Threat Intelligence Internship jobs include:

What job categories do people searching Remote Threat Intelligence Internship jobs look for?

The top searched job categories for Remote Threat Intelligence Internship jobs are:

Remote Threat Intelligence Internship jobs near you
Infographic showing various Remote Threat Intelligence Internship job openings in the United States as of August 2026, with employment types broken down into 14% Internship, 63% Full Time, 14% Part Time, and 9% Contract. Highlights an 100% Remote job distribution.

Threat Intelligence Engineer (REMOTE)

Cyware

Remote

$52.25 - $67.75/hr

Full-time

Retirement

Posted 16 days ago

Job description

About Cyware
Cyware delivers an innovative approach to cybersecurity that unifies threat intelligence, automation, threat response, and vulnerability management with data insights gleaned from assets, users, malware, attackers, and vulnerabilities. Cyware's Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security teams. Cyware is widely deployed by enterprises, government agencies, and MSSPs, and is the leading threat intelligence sharing platform for global ISACs and CERTs.
Your next opportunity starts here!
More on Cyware: (www.cyware.com)
Built and designed by SecOps practitioners and cybersecurity leaders, Cyware offers multiple technologies within its Cyber Fusion platform, including advanced threat intelligence solutions (TIP) for large and small security teams, vendor-agnostic security automation (SOAR), and purpose-built security case management. As a result, organizations can increase speed and accuracy while reducing costs and analyst burnout. Cyware's Virtual Cyber Fusion solutions make secure collaboration, information sharing, and enhanced threat visibility a reality for enterprises, sharing communities (ISAC/ISAO), MSSPs, and government agencies of all sizes and needs.
About you:
  • You are driven, inquisitive, proactive, and energetic
  • You have a growth mindset and are committed to delivering results
  • You thrive in a fast-paced, collaborative environment
Why We Are Hiring:
The Threat Intelligence Engineer is someone with real threat intelligence depth and the technical ability to understand threat feeds' data model and map it correctly to STIX 2.1, who uses AI to make that work dramatically faster. Someone who can be our threat intelligence SME: writing the use cases, supporting pre-sales and customers, and giving Product the domain expertise that shapes what we build.
Come join an exciting cybersecurity product startup that has closed its Series C funding round!
What You Will Do:
  • Map feeds to STIX and own the connector portfolio
  • Design and maintain mappings from commercial, open-source, and community threat intelligence sources into STIX 2.1 objects, relationships, markings, patterning, and extensions while preserving semantic fidelity.
  • Understand threat intel feed data models when API documentation is incomplete, or missing: inspect live payloads, sample data, and vendor dashboards to establish ground truth
  • Own connector lifecycle and quality-from onboarding new sources to detecting schema drift, validating mappings, and ensuring production reliability
  • Work directly with feed, sandbox, DRP, and enrichment partners on integrations and joint use cases
  • Leverage AI to accelerate engineering workflows
  • Build and improve an AI-assisted mapping workflow: infer schemas from sample payloads, propose candidate field-to-STIX mappings from documentation, and flag schema changes, while maintaining rigorous validation and human oversight
  • Be the threat intelligence SME for Product
  • Write threat intelligence use cases that drive product design, and pressure-test new capabilities against real analyst workflows.
  • Partner with Product to shape intelligence workflows, including PIRs, ATT&CK-aligned investigations, threat modeling, prioritization, collaboration, and intelligence-driven automation
  • Represent Cyware on MITRE and industry alliance committees, and bring what you learn back inside
  • Be the threat intelligence SME for the field
  • Serve as the technical threat intelligence expert for customers, prospects, and partners, translating complex intelligence concepts into practical business value
  • Enable Solution Architects, Sales Engineers, and Customer Success Managers with the threat intelligence knowledge and use cases they need to win and deliver
Who You Are:
  • US Citizenship is a requirement of this position in accordance with 8 U.S.C 1324b(a)(2)(C)
  • 5+ years in threat intelligence as an analyst, engineer, or specialist, with hands-on experience on enterprise-scale security products
  • Deep working knowledge of STIX/TAXII 2.1 objects, relationships, patterning, markings, and how to handle source data that does not fit the standard cleanly. You have implemented STIX mappings in production-not just studied the specification
  • Hands-on experience with commercial and open-source threat feeds and enrichment sources (CrowdStrike, Mandiant, Recorded Future, Flashpoint, Intel 471, MISP, etc.), and with threat intelligence platforms
  • Python: you write real code. API clients, parsers, normalizers, validators. This role builds and debugs; it does not spec and hand off
  • Practical AI fluency. You have used LLMs for real technical work: schema inference, data mapping, documentation parsing, code generation, and you know where they fail
  • Strong command of the intelligence lifecycle, MITRE ATT&CK, and the handling of IOCs, TTPs, and threat actors in conjunction with SOC, incident response, and threat hunting operations
  • Comfortable in a customer-facing, cross-functional seat: you can defend a mapping decision to an engineer and explain the value of intelligence to a CISO
  • Demonstrated ability to work successfully with colleagues across different time zones and geographies

We're a lean team, so your impact will be felt immediately. If this all sounds like a good fit for you, why not join us?
You'll love working at Cyware because
  • We foster an exciting and challenging start-up culture.
  • We're not just employees. We're people. We offer a comprehensive benefits package including time off, paid holidays, retirement plans, insurance coverage and much more.
  • We'll invest in your career. Our company is growing quickly and we will give you the opportunity to do the same. You will have access to a number of professional development opportunities so that you can keep up with the company's evolving needs.
  • We offer competitive compensation packages. We deeply value the talent our team brings to the table and believe that fair and equitable total compensation packages are part of our commitment to everyone who works here.
  • We value diversity of people, culture, and ideas.
EEO Statement:
Cyware is dedicated to hiring a diverse workplace that celebrates an inclusive culture and a sense of belonging. As an equal opportunity employer, we do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, gender expression, and sexual orientation), national origin, age, veteran status, genetic information or disability.
How to Apply
Apply right here. You've found the application!
Cyware logo

About Cyware

Sourced by ZipRecruiter

Industry

Network security

Company size

201 - 500 Employees

Headquarters location

Jersey City, NJ, US

Year founded

2016

View All Cyware Jobs

Apply