Company: Careful Security Location: Remote. Job type: Paid internship, W-2 hourly. Fixed-term, summer 2026. Seniority: Internship Pay: Undergraduate $25/hour. Graduate $30/hour.
About Careful Security
Careful Security is a boutique cybersecurity and compliance firm that operates as an embedded security extension for growth-stage and enterprise clients. We deliver hands-on compliance readiness across SOC 2, ISO 27001, ISO 27017/27018, ISO 42001, HIPAA, and PCI-DSS, alongside vCISO advisory, penetration testing, and security risk assessments. We also build Dashr.ai, our patent-pending compliance automation and security intelligence platform.
The Opportunity
You will spend the summer finding the manual, repetitive cybersecurity work inside our operations and replacing it with clean documentation and AI-powered automation the whole firm relies on.
What You Will Do
• Write code to enhance our security platform
• Collect and validate evidence for Compliance Requirements
• Build automation scripts that remove manual steps from internal operations
• Prototype agentic AI workflows where an AI agent can make decisions, retrieve information, and execute multi-step tasks autonomously
• Conduct Risk Assessments and occasional penetration testing
What We Are Looking For
• Bachelor's Degree in Computer Science or related field
• Master's Degree in Cybersecurity
• Hands-on curiosity about agentic AI, LLMs, and applied automation
• Clear written communication, since documentation is a core deliverable
• Authorized to work in the United States
• Exposure to Microsoft Azure, Microsoft Entra ID, cloud security, SIEM Solutions
• Familiarity with compliance frameworks such as SOC 2 or ISO 27001, ISO 42001, CMMC
• Experience building with LLM APIs or agent frameworks
• Willingness to wear more than one hat from Security Monitoring to Application Security
How To Apply
• Apply through LinkedIn. If you have a project or repo that shows initiative, please include it! That matters more to us than a long resume.
• Employment is contingent upon verification of work authorization and completion of any applicable background checks, in accordance with company policy and applicable law.