Security Associate - Internship

Overview

Alan is offering a security associate internship based in Paris as a six-month end-of-studies opportunity. The role places interns as full members of the security team to work on protecting health data for over one million members. The position provides a dedicated coach to guide the intern, supervise their thesis, and support the goal of transitioning into a full-time job at the end of the term.

Who can apply

Candidates must be at the end of their studies in an engineering or security track and available for a six-month internship. Applicants need solid basics in security and IT, proficiency in Python, and the ability to automate repetitive tasks. The ideal candidate demonstrates curiosity, risk sense, collaborative problem-solving skills, and clear structured written communication in English, with French language skills considered a plus. Additional background through Capture the Flag events, personal security projects, prior security internships, or cloud and SaaS experience is also welcomed.

What you get

Interns receive guidance from a dedicated coach and the opportunity to write an end-of-studies thesis on a real security subject while owning a recurring security campaign and shipping a technical project to real users. Perks include flexible working arrangements with the choice of working from the Paris headquarters, sponsored co-working hubs, or full-remote with a home office equipment sponsorship. Additional benefits consist of top-range equipment including a MacBook Pro and Bose headphones, flexible vacation policies and working hours, country-specific commuter benefits, learning and training opportunities, and personal growth through coaching.

Requirements

The role requires working with engineers across the company on topics chosen alongside a coach, which may span governance and compliance, vulnerability management, detection and response, or technical build projects. Participants are expected to handle tasks such as ISO 27001 and HDS compliance, statutory IT audits, customer security reviews, risk management, triaging scan findings, driving fixes, writing detection rules, and investigating incidents.