# GRC Team Intern

**Company:** [Cloudflare](https://hotfix.jobs/companies/cloudflare)
**Location:** Austin, TX
**Role:** Security Engineering
**Experience:** 0+ years
**Skills:** nist 800-53, ISO 27001, SOC 2, Risk Management, Python, API Integrations, data cleaning, Workflow Automation, ai models, application development, Technical Writing, Observability, Prompt Engineering, llm coding, cloudflare workers
**Posted:** 2026-08-04

> Supports Cloudflare’s security compliance and risk programs through control evaluations, audits, risk assessments, and automation. The internship requires familiarity with security frameworks, risk management, Python, application development, and AI-enabled workflows.

## Job Description

## Responsibilities
- Execute a specialized project that directly improves Cloudflare’s security posture over a 12–16 week internship.
- Improve the maturity of the Security Compliance program by:
  - Evaluating the efficacy of security controls implemented across the organization.
  - Developing and implementing automated solutions to improve Governance, Risk, and Compliance processes and operations, integrating with existing security, engineering, and AI tools.
  - Supporting the security risk register by triaging and assessing potential risks, proposing mitigation strategies, and presenting key security insights to leadership.
  - Supporting security data center audits and assessments.
- Work cross-functionally with Legal, People, Engineering, and Finance teams to integrate security into company operations.
- Work closely with a mentor for hands-on guidance in a specific security domain.
- Connect and learn from executives and leadership, including the co-founders.
- Present the security project to the company at the end of the internship.
- Write for the Cloudflare blog and participate in Cloudflare TV sessions.

## Requirements
- Working knowledge of industry-standard frameworks such as NIST 800-53, ISO 27001, or SOC 2 principles through coursework or personal study.
- Understanding of risk management methodologies, including identifying threats, assessing impact and likelihood, and suggesting mitigation strategies.
- Ability to write basic Python scripts to automate repetitive tasks, such as interacting with APIs or cleaning data.
- Experience with workflow logic and orchestration, including “if-this-then-that” automation logic.
- Understanding of how to instruct AI models effectively and leverage them for day-to-day tasks.
- Ability to build and deploy a full application.
- Technical writing and documentation skills.
- Observability and metrics experience.
- Prompt engineering or experience using LLM coding tools.
- Familiarity with Cloudflare products such as Workers, Workers AI, R2, and D1.
- Demonstrated critical thinking, curiosity, empathy, adaptability, and ability to get things done.
- Ability to commit to a minimum 12-week summer internship.
- Ability to work in the office 3–5 days per week at the internship location.

## Nice-to-haves
- Passion for security and software development demonstrated through personal projects, open-source contributions, or experience.
- Experience building something with Cloudflare’s developer platform through Cloudflare for Students.

## Similar roles

- [Junior Cybersecurity Analyst](https://hotfix.jobs/jobs/3fd35ee9-d333-43cf-82c8-98805a50eb27) - Agency - Richmond, VA - $31k – $42k/yr
- [IT Security Operations Analyst](https://hotfix.jobs/jobs/3a492a05-9ad3-485e-8f86-9a23c7e1e9ae) - AlertMedia - Austin, TX
- [Cyber Security Intern](https://hotfix.jobs/jobs/11a72900-cc7b-48a2-aa7d-c1e8943ac4c0) - Labelbox - San Francisco, CA - $40 – $55/hr
- [Detection Engineer II](https://hotfix.jobs/jobs/bd254448-d347-417b-a32b-42ef4f1eff89) - Instacart - Remote - $142k – $181k/yr
- [Security Guard](https://hotfix.jobs/jobs/6292c1e4-c4fe-48cd-9b8b-1c74ddf56031) - Idme - McLean, VA - $52k – $56k/yr

**Apply:** https://hotfix.jobs/jobs/3b4666f7-d60f-477e-846d-54f49750ec6b
**Canonical:** https://hotfix.jobs/jobs/3b4666f7-d60f-477e-846d-54f49750ec6b