Security Operations Intern
Sky Mavis operates Mavis Hub, a web3 gaming platform for discovering and accessing games. It develops and supports blockchain-integrated gaming experiences, including Axie Infinity titles.
Maintainer signals as of 8/23/2026
Funding history
About Sky Mavis
Sky Mavis operates Mavis Hub, which provides a browsable catalog of web3 games across strategy, adventure, RPG, puzzle, action, survival, and other genres. The platform supports game access, account login through Ronin Waypoint, and connections to Axie Infinity collectibles and related services. The website identifies Sky Mavis as the developer of Axie Infinity: Origins, Axie Infinity: Homeland, and Axie Classic.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the security awareness training program from curriculum design through daily operations and audit reporting. You will create modules and quizzes covering phishing, authentication, data handling, remote work, and Web3 threats. You will map content to compliance controls, track completion, analyze quiz results, document runbooks, and produce audit evidence. You will also implement, test, deploy, and support the platform using Solidity, Express, TypeScript, PostgreSQL, React, and related tools under senior guidance.
Requirements
- Final-year student or recent graduate in Information Security Computer Science or a related field or equivalent practical experience
- Knowledge of phishing social engineering credential theft and malware delivery
- Basic awareness of the OWASP Top 10
- Understanding of security awareness and security operations
- Familiarity with SOC 2 ISO 27001 or NIST CSF
- Working programming ability in TypeScript or JavaScript
- Knowledge of Node.js REST APIs SQL and React
- Strong written communication skills
- Interest in Web3 security and willingness to learn Solidity basics
- Understanding of Git workflows branching pull requests and code review
- Security research hands-on or Blue CTF experience
- Experience with KnowBe4 or GoPhish
- Experience with SOC or security operations tooling
- Experience collecting audit evidence
- Exposure to Solidity Hardhat ethers.js or an EVM chain
- Experience creating instructional content or running internal campaigns
Responsibilities
- Design and author security awareness training modules and quiz banks
- Map training modules to SOC 2 and ISO 27001 compliance controls
- Enroll employees and manage deadlines and renewal cycles
- Monitor completion rates and follow up with overdue employees
- Produce audit-ready evidence exports and security metrics
- Analyze quiz results to identify knowledge gaps and improve content
- Document program runbooks and audit procedures
- Implement Solidity contracts and the Express TypeScript PostgreSQL backend
- Build React modules dashboards and certificate verification features
- Run contract and backend integration tests
- Perform security audit and business-logic checks before pull requests
- Deploy and support the platform
