Security & IT Intern

Eight Sleep•Madison, MS

About The Position

This is a hands-on corporate security and IT internship working with the Security team that also manages security, compliance and IT for the company. You will work directly with the Head of Security and the Security Engineer. It is part time, 20 hours a week around your class schedule, and you will own bounded projects end to end, ship them, and demo them to the engineering org.

Requirements

AI-first mindset. We empower the team with the best tools available to scale beyond themselves.
Junior or Senior at a US college or university, in computer science or a related program.
Scripting ability in Python or similar. You have written something that calls an API and does a job for you.
Working knowledge of how identity works in a company: SSO, MFA, directory groups, least privilege.
One concrete thing you have administered or secured: a club's Google Workspace, a home lab, a campus help desk, a CTF team's infrastructure, a part-time IT job.
Clear security writing: send us something you wrote (a lab writeup, a README, a blog post, a how-to).
Available 20 hours a week during the school year, with at least 4 hours of overlap with US business hours on 3 or more days.
Authorized to work in the US; this role is not eligible for visa sponsorship.

Nice To Haves

CTF participation, bug bounty writeups, or a GitHub with real projects.
Help desk, campus IT, or MSP experience.
Exposure to any compliance framework (SOC 2, HIPAA, ISO 27001) through coursework or a job.

Responsibilities

Google Workspace administration, device management, and the SaaS access lifecycle — onboarding, offboarding, and access reviews that hold up in an audit.
Run the access-review and device-compliance checks, then automate the parts you find yourself repeating.
Keep compliance green with code: help remediate failing Vanta tests and automate evidence collection.
Triage inbound security and IT requests from employees for one shift a week, with a mentor reviewing every response.
Write runbooks and triage notes that an engineer, or an AI agent, can leverage.
Use AI tools (Claude Code and similar) as a first resort to scale your own work, and push those workflows toward fully automated production jobs.