Security Intern

ezCater is the leading food for work technology company in the US, connecting anyone who needs food for their workplace to over 100,000 restaurants nationwide. For workplaces, ezCater provides flexible and scalable solutions for everything from recurring employee meals to one-off meetings, all backed by 24/7 customer service with real humans. ezCater also enables companies to manage their food spend in a single, customizable platform. For restaurant partners, ezCater helps them grow their business by bringing them more orders and new high-value customers. We're backed by top investors including Insight, Iconiq, Lightspeed, GIC, SoftBank, and Quadrille.

We're looking for a Security Engineering & Compliance Intern to join our Security Engineering and Compliance team. You'll work alongside Security Engineers and Security Analysts to help design and implement practical, scalable risk management and security solutions across IT Security, Incident Response, Security Operations, and Security Assurance domains, while learning how we turn compliance and risk needs into real-world engineering outcomes.

Internship dates: June 1, 2026 - August 14, 2026

What You'll Do:
- Learn about our users, systems, and security posture, and how security enables our product and business goals.
- Support security assessments of code and infrastructure changes with guidance from Security Engineers, helping ensure alignment with SOC 2, PCI-DSS, and internal policies.
- Assist with automating recurring security and compliance activities such as vulnerability scanning, risk assessments, third-party risk reviews, and control validation.
- Help create and tune monitoring and detective alerts for security operations, non-compliance, and incident response, using our security tools and dashboards.
- Contribute to maintaining a healthy posture of our security tools and automations by helping with configuration, troubleshooting, and documentation.
- Assist with collecting, organizing, and reviewing audit evidence for SOC 2
- Participate in security incident response exercises and post-incident reviews, learning how we investigate and mitigate security events.