Vimeo empowers video creators to tell exceptional stories and connect with their audiences and communities. Home to more than 60 million members in over 150 countries, Vimeo is the world’s largest ad-free open video platform and provides powerful tools to host, share and sell videos in the highest quality possible.

As a Security Engineering Intern, you’ll work closely with business and technical stakeholders to ensure Vimeo remains safe and secure. You’ll help plan and carry out security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks. Provide hands-on support for a broad spectrum of technologies, including systems and software running on Linux systems, network devices, virtual machines, as well as Vimeo’s various offerings.

What you’ll do:

• Contribute to the infrastructure and security teams at Vimeo
• Help to prioritize, triage and remediate vulnerabilities and findings from system scans and bug bounty programs
• Help build phishing campaigns
• Support team with events and alerts monitoring
• Assist in performing security assessments of Vimeo’s platforms and infrastructure  
• Aid in improving computer security in our office, through our data centers and across cloud providers
• Identify and remediate weaknesses in our processes and procedures
• Configure Vimeo systems to comply with industry best practices and hardening standards
• During your internship you will grow both technically and professionally in an awesome environment with tons of development opportunities to learn and do more

What we’re seeking:

• You are familiar with one or more of the following languages: Bash, Ruby, Python, PHP, Node.js
• You have some understanding of email (SMTP, DMARC,DKIM,SPF)
• You have an interest in Incident response and “Blue Team” strategy
• You have some understanding of principle of least privilege and the confidentiality, integrity, and availability triad and will work to enforce those concepts in our environment
• You are currently pursuing a BS or MS in Computer Science, Engineering, or Computer Security related technical discipline, with an expected graduation date of 2022 or 2023

Bonus points:

• Vulnerability scanning and incident response experience
• AWS / GCP Certifications
• Experience with Red Hat and variants
• You are familiar with one or all of the following: OSI model, TCP/IP, HTTP and TLS
• Experience with web application penetration testing