Security Associate - Internship

HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. ⭐ SECURITY ASSOCIATE INTERNSHIP ⭐ Six-month end-of-studies internship in Paris. Looking for an end-of-studies internship where you do real cybersecurity work, not a side project nobody uses? Alan protects the health data of more than 1M members, and keeping it safe is part of everyday work here. You join the Security team as a full member for six months. Topics span from compliance and certifications to vulnerabilities, detection and incident response, and you have room to pick the ones where you can have the most impact. A dedicated coach guides you and supervises your thesis. The goal at the end is a full-time job at Alan. ⭐ DETAILED MISSIONS ⭐ Alan is opening new countries, and each one brings more audits, certifications and customer security reviews. Possible topics span from governance and compliance to hands-on technical work. You won't do all of them: with your coach, you choose the ones that matter most for Alan and for you. - Governance, risk and compliance: ISO 27001 and HDS (French health data hosting) certifications, statutory IT audit, customer security reviews, risk management - Vulnerability management: triage reports and scanner findings, drive fixes with engineering teams, improve our tooling - Detection and response: write detection rules, investigate alerts, support the team on incidents - Build: technical projects you own from framing to adoption. Past projects: an internal pentest for an audit, code scanning and remediation, an HDS internal audit, tooling proofs of concept - Automate what repeats, so the team spends its time where the risk is ⭐ KEY OUTCOMES ⭐ By the end of the internship, you will have: - Owned a recurring security campaign end to end and left it cheaper for the next round - Shipped one technical project to real users - Written your end-of-studies thesis on a real security subject - Worked with engineers and senior people across the company ⭐ PROFILE & COMPETENCIES ⭐ - End of studies: engineering or security track, looking for a six-month internship - Security foundations: solid basics in security and IT, and you can apply them to a concrete case - You code: Python at least, and you automate the repetitive part - Curiosity: you dig into topics you don't master yet, and you are curious about compliance, not only offensive security - Risk sense: you know not every risk is equal, and some trade-offs are worth taking - Collaboration: you work with engineers, not against them, and look for solutions that work for both sides - Clear communication: structured and written, in English (French is a plus) - Bonus: CTF