Sky Mavis is building the future of gaming and virtual economies. As the creators of Axie Infinity—the groundbreaking Web3 game—and Ronin, an Ethereum-linked blockchain crafted specifically for gaming, Sky Mavis empowers players, developers, and creators with true digital ownership.

Role Summary

Sky Mavis is looking for a proactive Security Operations Intern to own the deployment and operational lifecycle of an in-house security awareness platform. Sitting at the intersection of security operations, compliance, and internal tool delivery, you will author Web3-focused security curriculums, map training modules to global compliance frameworks (SOC 2, ISO 27001), and help build and operate internal security training workflows.

Key Responsibilities

Curriculum Design & Authoring: Design and write training modules and quiz banks covering phishing, social engineering, password/MFA hygiene, data classification, and Web3-specific attack vectors (seed phrase protection, approval scams, fake dApps, wallet drainers).
Compliance Mapping: Map modules and completion metrics directly to compliance standards (SOC 2 CC1/CC2, ISO 27001 A.6.3 awareness controls) to provide auditable evidence for external reviews.
Platform Build & Operations: Implement features and maintain the training tool using TypeScript/JavaScript with senior guidance and AI-assisted tooling.
Program Operations: Manage the day-to-day training lifecycle—enrolling employees, configuring deadlines and renewals, tracking completion rates, and partnering with the People team.

Requirements & Qualifications

Must-Haves

Technical Foundations: Practical programming familiarity in TypeScript / JavaScript (Node.js, REST APIs, basic SQL, basic React) to implement features from technical specifications.
Web3 Security Interest: Strong curiosity about Web3 security, wallet threat models, and on-chain verification, with willingness to learn Solidity basics.
Written Communication: Clear, structured written communication skills to write employee-facing educational content and auditor-ready compliance documentation.
Developer Workflows: Working understanding of Git workflows (branching, pull requests, code reviews).