Information Security Intern (f/m/d)

What we build Most companies find out about supplier insolvencies, cyber attacks, factory fires or floods that affect their supply chain when it's already a crisis. Prewave exists to change that. We're an AI-native company giving BMW Group, Hilti and Lufthansa real-time visibility into supply chain risks before they become headlines. We're looking for an Information Security Intern who takes ownership of building things that are actually used and automating what slows down a modern security team from day one. Someone who uses AI as a default part of how they work - and knows when to trust their own judgment. What you'll own You'll sit inside our Security function and work across IT, Engineering and Operations, automating the manual work that slows a modern security team down. That means shipping detection logic, AI agents and integrations that turn noisy, copy-paste security workflows into clean, reliable pipelines. You will work on: SecOps automation at the core: Eliminate recurring manual work like alert triage, log enrichment, phishing analysis, access reviews and vulnerability tracking, so analysts spend their time on real threats, not busywork. AI agents with real impact: Build end-to-end agents that handle repetitive security tasks, from pulling and correlating signals across tools, to enriching indicators of compromise, to drafting incident summaries and firing Slack or email notifications. Internal security tooling you own: Spec, build and deploy lightweight dashboards and tools that replace fragmented spreadsheets and manual tracking for detections, vulnerabilities and audit evidence, start to finish. Integrations that stick: Connect SIEM, EDR, vulnerability scanners, identity providers and ticketing systems via APIs so security data flows automatically, with no manual handoffs. Direct stakeholder partnership: Work alongside IT, Engineering and Operations to scope real risks, prototype fast, and measure alerts resolved and hours saved. You own outcomes, not just tickets. What we are looking for You are the right fit if you have: Technical foundation: Strong coding ability in Python or TypeScript/JavaScript, with working knowledge of REST APIs, JSON, SQL and Git, and a solid grasp of security fundamentals (networking, authentication, common attack techniques). Degree in Software Engineering, Information Systems or Cybersecurity preferred; a non-technical degree is fine if your portfolio demonstrates equivalent ability. AI-native builder: Hands-on experience shipping projects with AI coding assistants (Cursor, Claude Code, or similar) and at least one workflow automation platform (n8n, Zapier, or Make). Familiarity with MCP servers or agent frameworks is a strong plus. Security-curious: Genuinely interested in how attackers operate and how defenders respond, and able to translate fluently between technical and non-technical stakeholders. Prior professional security experience is not required, but you should be excited to learn detection, incident response and threat hunting from the inside. Delivery mindset: A track record of shipping secure working v1s in days, not perfect v3s in quarters. Be ready to share two or three projects you built end-to-end and walk us through what you'd do differently. Nice to have: Exposure to EDR or SIEM tooling (e.g. CrowdStrike Falcon), or to running detections and hunting queries. Experience with security or IT workflows: vulnerability management, identity and access, incident response, or compliance evidence for frameworks like SOC 2, ISO 27001 or GDPR. A Capture-the-Flag background, home lab, or any hands-on tinkering with security tools. What's our working style We're a resilient AI-native team building an AI-native resilience product - and we hire for both. For us, AI-native has always meant humans and AI working together, not one replacing the other. We use tools like Claude, Gemini, Cursor as a normal part of the job, to think faster, work smarter and spend less time on the repetitive stuff. We treat AI fluency as a skill like any other - something you build, experiment with and keep developing. What goes with that is real ownership. You'll have the space and the trust to figure things out your way - with a strong team around you and plenty of support when you need it. Things move fast here and the brief won't always be complete, but that's what makes the work interesting. The people who do best at Prewave are curious by default, go after things rather than wait to be handed them, and don't lose their footing when the plan changes. We score six values in every interview - creating positive impact, optimising for customer value, being an ambitious innovator, operating with urgency, doing things that make sense and collaborating with kindness - so you always know what we're looking for and can prepare accordingly. The Package Minimum EUR 1,400 gross monthly, on full-time basis and prorated to the weekly hours in part-time. Flexible hours and hybrid working. Your birthday off. MyClubs partnership. Mental health support. Regular health check-ups and initiatives. Company-wide training. Fun team events. Device of choice. Work from anywhere - up to 8 weeks a year.