Co-op Duration: July 11th, 2022 - December 16th, 2022

Internship Duration: June 6th-August 12th, 2022

At Wayfair, we love solving complex business problems with technology to serve our millions of customers, to sell and deliver a catalog of millions of products, and to continue growing at a rapid pace – a journey enabled by more than 3,000 Wayfair engineers. 

The Wayfair Security & Privacy team designs secure solutions and systems, builds trusted relationships with our customers and partners across our global organization, investigates security incidents, discovers and mitigates vulnerabilities, both internal and external. Our teams cover all aspects of cybersecurity and privacy for Wayfair, from application security, to warehouse and network security, to penetration testing, to security operations and monitoring.  We are looking for curious, collaborative, critical thinking, customer-focused interns to support our teams, and ideally join us full-time after the internship. 

The Wayfair Security & Privacy team is a collegial, fun-loving group of problem solvers.  Successful candidates are team players who like learning new things, communicate well, know when to ask for help, and are always offering help.

What You’ll Do

• Support and conduct security and privacy assessments of systems, data flows, and third party vendors. 
• Perform log reviews and analyze security events and threats.
• Analyze security issues, determine cause and impact, and recommend corrective action
• Identify, coordinate, track, and report remediation for high-risk vulnerabilities
• Triage various security and privacy tickets to facilitate prioritization and processing.
• Participate in establishing appropriate controls for Cloud Security, Endpoint Protection, Security Software Development, Identity & Access Management, and Data Protection. 
• Participate in the development, maintenance and implementation of security tools
• Collaborate with other IT security and privacy professionals to provide exceptional support and problem resolution
• Review and update security and privacy policies, standards, and procedures. 
• Support and help devise security and privacy awareness campaigns.
• Review and understand compliance regulations, such as SOX and PCI. 
• Participate in team initiatives
• Support the company's commitment to protect the integrity and confidentiality of systems and data.

What You’ll Need

• You are currently enrolled in a full-time Bachelor’s degree program in Computer Science or a related technical field 

• An understanding of basic security concepts and practices.

• You have a proven track record of strong academic performance.
• Eagerness to learn with a general understanding and interest in a career in cybersecurity, risk management and technology practices
• Ability to work independently and within a team environment.
• Effective written and oral communication skills.
• Ability to present findings and recommendations to peers, coworkers, and customers.
• Are self-driven and motivated to work in a results-driven agile environment
• A self-starter who is eager to expand his/her skills and knowledge.
• Technical capability and/or interest in one or more of these areas:
• Scripting
• Log analysis
• Identity and Access Management
• Ethical Hacking
• Networking
• Cloud Computing
• Data Science
• DevSecOps