Security Operation Intern
标签：Web3工作 •加密货币实习职位 •区块链安全工作 •区块钱工程工作 •区分类固态工作 •区别反应工作 •加元货币 Web3工作 About Sky MavisSky Mavis 正在构建游戏的未来。我们是创建了最成功的 Web3游戏 Axie Infinity 和 Ronin,这是一个专用构造的区块链，在2024年排名第4位使用量最大的链接，仅次于以太坊，比特币和索拉纳。我们已经处理了超过43亿美元的连锁交易量，并得到了来自顶级投资者170多万美元的支持，包括 a16z,Accel,Libertus Capital 和 Paradigm.我们的团队快速移动，有意义地建立，并且相信玩家真正拥有自己的世界。如果你对开放经济体，大规模和塑造新的数字边界感到兴奋的话，加入我们。关于角色我们正在通过内部平台取代商业第三方安全意识培训供应商。你将拥有安全意识培训计划：设计培训内容和问卷银行，构建并部署提供该平台 （架构和规格已经完全记录下来，并且你将在高级指导下使用人工智能辅助开发工具）,然后将其作为一个运营安全项目注册，完成跟踪和审计准备报告。你将离开与一些实习生获得的东西：实践经验，为整个公司运行一个真正的安全意识计划，以及你将其运行的生产平台。你会做什么安全意识计划 （主要重点）模块和问卷库涵盖鱼和社会工程，密码和 MFA 卫生，数据处理和分类，安全远程工作以及 Web3特定威胁 （钱包安全，种子短语保护，批准骗局，假的 dApps）.将每个培训模块与其符合的合规要求进行绘制 （SOC 2 CC1/CC2,ISO 27001 A.6.3意识控制）,以便审计人员能够追踪证据到控制器。日常运行培训计划：招聘员工，配置模块截止日期和加入周期，监测完成率，并跟进随时延迟的人群。制作准备审核报告：完成证据出口，审计人员在链上进行验证联系以及安全团队定期的指标 （完成%平均分数）
查看英文原文
Tags: Web3 Jobs • Cryptocurrency Internship Jobs • Blockchain Security Jobs • Blockchain Engineering Jobs • Blockchain Solidity Jobs • Blockchain React Jobs • Cryptocurrency Web3 JobsAbout Sky MavisSky Mavis is building the future of gaming. We’re the creators of Axie Infinity, the most successful Web3 game ever, and Ronin, a purpose-built blockchain that ranked as the 4th most-used chain in 2024, behind Ethereum, Bitcoin, and Solana.We’ve processed over $4.3 billion in on-chain volume and are backed by more than $170 million from top-tier investors, including a16z, Accel, Libertus Capital, and Paradigm.Our team moves fast, builds with intention, and believes in a world where players truly own what they earn. If you’re excited by open economies, massive scale, and shaping new digital frontiers, join us.About the RoleWe are replacing our commercial third-party security awareness training vendor with an in-house platform. This internship sits at the intersection of security operations and software delivery. You will own the security awareness training program end-to-end: designing the training content and quiz bank, building and deploying the platform that delivers it (the architecture and specifications are already fully documented, and you'll work with AI-assisted development tooling under senior guidance), and then running it as an operational security program — enrollments, completion tracking, and audit-ready reporting.You'll leave with something few interns get: hands-on experience running a real security awareness program for a whole company, plus the platform you shipped to production to run it on.What You’ll DoSecurity awareness program (primary focus)Design and author the security awareness training curriculum: modules and quiz banks covering phishing and social engineering, password and MFA hygiene, data handling and classification, secure remote work, and Web3-specific threats (wallet security, seed phrase protection, approval scams, fake dApps).Map each training module to the compliance requirements it satisfies (SOC 2 CC1/CC2, ISO 27001 A.6.3 awareness controls) so auditors can trace evidence to controls.Operate the training program day-to-day: enroll employees, configure module deadlines and renewal cycles, monitor completion rates, and chase stragglers with the People team.Produce audit-ready reporting: completion evidence exports, on-chain verification links for auditors, and periodic metrics for the security team (completion %, average scores, weakest topics).Use quiz analytics to find knowledge gaps and iterate on content — treat awareness as a measurable security control, not a checkbox.Document program runbooks (onboarding a new hire, adding a module, annual renewal campaign, audit evidence collection) so the program survives beyond the internship.Platform delivery (the tool you'll run the program on)Implement the platform from the existing specification under senior review: Solidity contracts (completion tracker + soulbound certificate NFT), Express/TypeScript/PostgreSQL backend with server-side quiz scoring and signed attestations, and the React frontend (module player, quiz flow, dashboards, admin analytics, public certificate verification).Test and harden it: contract tests (100% must pass), backend integration tests, and the project's mandatory security-audit and business-logic checks before every PR — zero Critical/High findings before deploy.Deploy, then support.What We Look ForFinal-year student or recent graduate in Information Security, Computer Science, or a related field (or equivalent practical experience).Solid security fundamentals: common attack vectors (phishing, social engineering, credential theft, malware delivery), basic OWASP Top 10 awareness, and why the human layer is a primary attack surface.Genuine interest in security awareness and security operations: you can explain what makes training effective versus checkbox compliance, and you care about measuring behavior change, not just completions.Familiarity with a compliance or control framework (SOC 2, ISO 27001, NIST CSF)Working programming ability in TypeScript/JavaScript (Node.js, REST APIs, basic SQL, basic React) — enough to implement from a detailed specification with senior review and AI-assisted tooling. This is a build-and-operate role, not a research role.Strong written communication: you will author training content and audit documentation that non-technical employees and external auditors will read.Interest in Web3 security — wallet threats, on-chain verification — with motivation to learn Solidity basics quickly (prior experience not required).Understanding of Git workflows (branching, pull requests, code review).Nice to HaveSecurity research/hand-on or Blue CTF experience.Prior exposure to an awareness training or phishing-simulation platform (e.g., KnowBe4, GoPhish) as an admin or content author.Experience with SOC/security operations tooling, or contributing to audit evidence collection.Exposure to Solidity, Hardhat, ethers.js, or any EVM chain (Ronin is a plus).Experience creating instructional content (slides, videos, quizzes) or running internal campaigns.Apply here 👉 Security Operation Intern